---
id: CVE-2026-86539
title: >-
  knowns through 0.33.0 contains a server-side request forgery vulnerability in
  the POST /api/embedding-models/test endpoint that issues outbound requests to
  caller-supplied destinations without validation
summary: >-
  knowns through 0.33.0 contains a server-side request forgery vulnerability in
  the POST /api/embedding-models/test endpoint that issues outbound requests to
  caller-supplied destinations without validation. Attackers can enumerate
  internal…
severity: high
cvss: 7.2
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N'
cwe:
  - CWE-918
vendor: knowns-dev
product: knowns
affected:
  - knowns <= 0.33.0
published: '2026-09-07'
updated: '2026-09-09'
sourceUpdated: '2026-09-09T15:17:18.480'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-86539'
references:
  - url: >-
      https://github.com/knowns-dev/knowns/blob/v0.33.0/internal/server/routes/embedding_models.go#L64-L110
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/knowns-dev/knowns/blob/v0.33.0/internal/server/routes/imports.go#L317-L330
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/knowns-dev/knowns/security/advisories/GHSA-qx9v-m9gg-p5jg
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/knowns-through-0.33.0-server-side-request-forgery-via-embedding-models-endpoint
    label: disclosure@vulncheck.com
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-09-09T14:52:03.550890Z'
epss: 0.00353
epssPercentile: 0.2629
ingestedAt: '2026-09-08T15:33:26.980Z'
---

## Overview

knowns through 0.33.0 contains a server-side request forgery vulnerability in the POST /api/embedding-models/test endpoint that issues outbound requests to caller-supplied destinations without validation. Attackers can enumerate internal hosts and cloud metadata endpoints by observing transport error messages that reveal network reachability information.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.