PrivateGPT vulnerabilities

CVEs whose affected-version data names the PrivateGPT package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-116000High· 7.3

yesterday

Zylon PrivateGPT URI Artifact Loader uri_loader.py load_file_from_uri server-side request forgery

A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function load_file_from_uri of the file private_gpt/server/ingest/uri_loader.py of the component URI Artifact Loader. Performing a manipu…

▾ TwilightZylon · PrivateGPTvia CVEORG