OpenMAIC vulnerabilities

CVEs whose affected-version data names the OpenMAIC package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-86259High· 7.5PoC

2w ago

OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated attackers to reach cloud instance metadata services

OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated attackers to reach cloud instance metadata services. Attackers can supply arbitrary provider URLs via the x-base-url he…

▾ MidnightTHU-MAIC · OpenMAICEPSS 0.25%via NVD