---
id: CVE-2026-8768
title: A vulnerability was found in vercel ai up to 3.0.97
summary: >-
  A vulnerability was found in vercel ai up to 3.0.97. The affected element is
  the function validateDownloadUrl of the file
  packages/provider-utils/src/download-blob.ts of the component provider-utils.
  The manipulation results in server-si…
severity: high
cvss: 7.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L'
cwe:
  - CWE-918
vendor: vercel
product: ai
affected:
  - ai <= 3.0.97
published: '2026-05-17'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T20:10:00.190'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-8768'
references:
  - url: 'https://gist.github.com/YLChen-007/07d149bd68adbee58165b4207a2abc71'
    label: cna@vuldb.com
  - url: 'https://gist.github.com/YLChen-007/cf7e47e4dda392f474ca77a66d1d847f'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/submit/811404'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/submit/811405'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/364393'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/364393/cti'
    label: cna@vuldb.com
tags:
  - nvd
epss: 0.00693
epssPercentile: 0.51814
ingestedAt: '2026-10-14T20:53:12.293Z'
---

## Overview

A vulnerability was found in vercel ai up to 3.0.97. The affected element is the function validateDownloadUrl of the file packages/provider-utils/src/download-blob.ts of the component provider-utils. The manipulation results in server-side request forgery. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

## Affected

- `ai <= 3.0.97`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.