CVE-2026-68507

ideon is a self-hosted visual workspace. Prior to version 0.9.5, ideon's link-preview endpoint requires no authentication at all and forwards any URL a caller supplies straight into a server-side fetch. The app does have a general-purpose SSRF guard (safeFetch/validateSafeUrl in src/app/lib/ssrf.ts), but this route sits behind no login check whatsoever, making it a fully open, anonymous URL-fetch relay - and the guard's IP blocklist itself has a gap that lets it reach the server's own loopback interface via the 0.0.0.0 "any address" bypass, a well-documented SSRF-filter evasion technique on Linux. This issue has been patched in version 0.9.5.

• CWE-306
• CWE-918

• https://github.com/3xpyth0n/ideon/releases/tag/v0.9.5
• https://github.com/3xpyth0n/ideon/security/advisories/GHSA-vpc2-r395-534p

Published

Nov 11, 2026

Last Modified

Nov 11, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-68499re2 provides Node.js bindings for Google's RE2 regular expre…6.2
• CVE-2026-6850Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.1…6.5
• CVE-2026-68500Sylius Mollie Plugin provides Mollie payment integration for…7.5
• CVE-2026-68501Sylius Mollie Plugin provides Mollie payment integration for…6.5
• CVE-2026-68502LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-te…9.8
• CVE-2026-68503LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-te…9.8
• CVE-2026-68508Hydra is a framework for elegantly configuring complex appli…7.8
• CVE-2026-68509FairEmail is a fully featured, open source, privacy-friendly…6.3
• CVE-2026-6851An Improper link resolution before file access ('link follow…7
• CVE-2026-68513OpenEXR is the reference implementation and specification fo…7.1
• CVE-2026-68514OpenEXR is the reference implementation and specification fo…5.5
• CVE-2026-68515OpenEXR is the reference implementation and specification fo…7.1