CVE-2026-40168

Postiz is an AI social media scheduling tool. Prior to 2.21.5, the /api/public/stream endpoint is vulnerable to SSRF. Although the application validates the initially supplied URL and blocks direct private/internal hosts, it does not re-validate the final destination after HTTP redirects. As a result, an attacker can supply a public HTTPS URL that passes validation and then redirects the server-side request to an internal resource.

• CWE-918

• https://github.com/gitroomhq/postiz-app/commit/30e8b777098157362769226d1b46d83ad616cb06Patch
• https://github.com/gitroomhq/postiz-app/releases/tag/v2.21.5Product, Release Notes
• https://github.com/gitroomhq/postiz-app/security/advisories/GHSA-34w8-5j2v-h6wwExploit, Mitigation, Vendor Advisory
• https://github.com/gitroomhq/postiz-app/security/advisories/GHSA-34w8-5j2v-h6wwExploit, Mitigation, Vendor Advisory

Published

Apr 10, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-40161Tekton Pipelines project provides k8s-style resources for de…6.5
• CVE-2026-40162Bugsink is a self-hosted error tracking tool. In 2.1.0, an a…7.1
• CVE-2026-40163Saltcorn is an extensible, open source, no-code database app…8.2
• CVE-2026-40164jq is a command-line JSON processor. Before commit 0c7d133c3…7.5
• CVE-2026-40165authentik is an open-source identity provider. Versions 2025…8.7
• CVE-2026-40166authentik is an open-source identity provider. In versions p…7.1
• CVE-2026-40169ImageMagick is free and open-source software used for editin…5.5
• CVE-2026-4017Buffer Overflow in the entry handler of the TraceEvent() sys…7.4
• CVE-2026-40170ngtcp2 is a C implementation of the IETF QUIC protocol. In v…7.5
• CVE-2026-40171In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab…8.4
• CVE-2026-40172authentik is an open-source identity provider. In versions p…8.1
• CVE-2026-40173Dgraph is an open source distributed GraphQL database. Versi…9.4