CVE-2026-119712
Last modified
CVE-2026-119712 is a medium-severity vulnerability rated 6.4/10 on the CVSS scale. PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser._fetch_single_url that allows attackers to make the indexing service fetch internal addresses by embedding image URLs in documents. Attackers can supply Markdown or HTML via uploads, synced mailboxes, or web connectors to reach loopback, private-network, or cloud metadata endpoints, with image responses embedded into indexed content..
Description
PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser._fetch_single_url that allows attackers to make the indexing service fetch internal addresses by embedding image URLs in documents. Attackers can supply Markdown or HTML via uploads, synced mailboxes, or web connectors to reach loopback, private-network, or cloud metadata endpoints, with image responses embedded into indexed content.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| pipeshub-ai | pipeshub-ai | < 0.10.0 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-119712?
How severe is CVE-2026-119712?
How do I fix CVE-2026-119712?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-119706InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthent…9.8
- CVE-2026-119707SonicJS through 3.0.0 contains a missing authorization vulne…7.1
- CVE-2026-119708abp-next-admin 10.4.0 through 10.7.0 contains a cross-tenant…6.5
- CVE-2026-119709Grimoire before 1.0.0 contains an unauthenticated server-sid…5.8
- CVE-2026-119710PipesHub 0.3.0 before 0.10.0 contains an event type injectio…7.1
- CVE-2026-119711PipesHub before 0.10.0 contains a rate limit bypass vulnerab…5.3
- CVE-2026-119713Paperclip 2026.403.0 before 2026.416.0 contains a remote cod…8.8
- CVE-2026-119714My Calendar WordPress plugin 3.8.8 before 3.8.11 contains a …6.5
- CVE-2026-119715NocoDB before 2026.08.0 contains a clickjacking vulnerabilit…4.3
- CVE-2026-119716pybars3 through 0.9.7 contains a code injection vulnerabilit…8.1
- CVE-2026-119717pybars4 through 0.9.13 contains a code injection vulnerabili…8.1
- CVE-2026-119718Blender before 4.5.15 and 5.x before 5.2.3 contains a heap b…7.8
Are you affected by CVE-2026-119712?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST