CVE-2026-46417

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-next.12, 21.2.13, 20.3.21, and 19.2.22, a Server-Side Request Forgery (SSRF) vulnerability exists in @angular/platform-server. The issue stems from how the server-side rendering (SSR) engine processes the request URL provided to the rendering entry points. When an absolute-form URL (e.g., http://evil.com) is passed to the rendering engine, the internal ServerPlatformLocation can be manipulated into adopting the attacker-controlled domain as the "current" hostname. Consequently, any relative HttpClient requests or PlatformLocation.hostname references are redirected to the attacker controlled server, potentially exposing internal APIs or metadata services. This vulnerability is fixed in 22.0.0-next.12, 21.2.13, 20.3.21, and 19.2.22.

• CWE-918

• https://github.com/angular/angular/pull/68570Issue Tracking, Patch
• https://github.com/angular/angular/security/advisories/GHSA-rfh7-fxqc-q52vThird Party Advisory
• https://access.redhat.com/security/cve/CVE-2026-46417Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2491444Third Party Advisory
• https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46417.jsonThird Party Advisory

Published

Jun 22, 2026

Last Modified

Jul 15, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-46411FlashMQ is a MQTT broker/server, designed for multi-CPU envi…6.5
• CVE-2026-46412@beproduct/nestjs-auth is a NestJS authentication module for…10
• CVE-2026-46413Discourse is an open-source discussion platform. Prior to 20…6.5
• CVE-2026-46414Microsoft UFO open-source framework for intelligent automati…8.8
• CVE-2026-46415The Caddy Defender plugin is a middleware for Caddy that all…8.2
• CVE-2026-46416Microsoft UFO open-source framework for intelligent automati…6.3
• CVE-2026-46419Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0…7.5
• CVE-2026-46420setup-php is a GitHub action to set up PHP with extensions, …5.6
• CVE-2026-46421The SAP Cloud Application Programming Model is a tool for bu…9.3
• CVE-2026-46423Rocket.Chat is an open-source, secure, fully customizable co…9.3
• CVE-2026-46424Budibase is an open-source low-code platform. Prior to 3.38.…4.2
• CVE-2026-46425Budibase is an open-source low-code platform. Prior to 3.38.…9.9