{"data":{"id":"0027a378-133a-464e-be15-149b420077d1","title":"CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the…","summary":"CVE-2026-63086 affects text-generation-inference through 3.3.7. Its OpenAI-compatible multimodal chat completions endpoint lacks validation in fetch_image (router/src/validation.rs), so an unauthenticated attacker can supply a crafted image_url and make the server send arbitrary HTTP GET requests. Because the reqwest client follows redirects by default, redirect chains can bypass scheme checks and reach private, loopback, link-local and cloud metadata addresses for internal port scanning and credential theft.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-63086","publishedAt":"2026-07-16T17:16:58.553Z","cveId":"CVE-2026-63086","cweIds":["CWE-918"],"cvssScore":"8.6","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["HuggingFace"],"affectedVendorsRaw":["text-generation-inference"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"text-generation-inference SSRF through image_url in chat completions endpoint","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00434,"epssCheckedAt":"2026-10-15T12:09:10.955Z","kevDateAdded":null,"advisoryAliases":["GHSA-c6cx-mj2w-vjcr"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-10T03:46:34.105Z","patchAvailable":null,"disclosureDate":"2026-07-16T17:16:58.553Z","capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"inference","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}