CVE-2026-63306

HIGH SEVERITY

CVSS Score & Metrics

Base Score

8.6 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N                                    

Vulnerability Description

stoatchat before 0.13.5 contains an unauthenticated server-side request forgery vulnerability in the /proxy and /embed endpoints that accept arbitrary URLs without DNS resolution filtering or private IP range validation. Attackers can enumerate internal services, fingerprint applications, and reach instance metadata endpoints by supplying malicious URLs or leveraging redirect chains to access internal infrastructure.

Vulnerability Details

Published Date

July 16, 2026

Last Modified

July 16, 2026

CWE ID

CWE-918

Source

NVD

Vendor

stoatchat

Product

stoatchat

External References

https://github.com/stoatchat/stoatchat/security/advisories/GHSA-xhww-5g9p-vvq5
https://www.vulncheck.com/advisories/stoatchat-before-unauthenticated-ssrf-via-proxy-and-embed-endpoints
https://github.com/stoatchat/stoatchat/security/advisories/GHSA-xhww-5g9p-vvq5

CVE-2026-63306

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment