{"data":{"id":"06e528df-7366-49ea-b022-85aec0f395d3","title":"GHSA-wfgq-w7cq-qj7j: mistral.rs Media Loader: Unauthenticated SSRF and arbitrary local file read via image_url","summary":"mistral.rs fetches request-supplied image and audio URLs through parse_image_url and parse_audio_url in mistralrs-server-core/src/util.rs without host, IP or allowlist checks, and opens file:// URLs and existing bare paths on the server. Because the server is unauthenticated by default, a remote client sending image_url or audio_url content can trigger server-side requests to internal or cloud-metadata addresses (SSRF) and read arbitrary local files. The error messages differ between existing and nonexistent paths, which lets an attacker probe which files exist.","solution":"Suggested fix: restrict request-supplied media to http(s) and data:, stop resolving bare strings to local files and stop honoring the file scheme from request input (gate local media behind an explicit, default-disabled option). Before fetching http(s), resolve the host, reject non-global IPs, pin the connection to the validated IP and re-validate or disable redirects. Cap the read size.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-wfgq-w7cq-qj7j","publishedAt":"2026-09-10T21:54:14.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["mistralrs-server-core@<= 0.8.17 (fixed: 0.8.18)"],"affectedPackageNames":["mistralrs-server-core"],"affectedPackageRefs":["cargo:mistralrs-server-core"],"affectedVendors":[],"affectedVendorsRaw":["mistral.rs"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-wfgq-w7cq-qj7j"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-09-10T21:54:14.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":"2026-10-29T21:30:43.670Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"inference","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"cargo","name":"mistralrs-server-core","fixedVersion":"0.8.18","matchedVersion":null,"fixReleasedAt":null,"daysToFix":null,"match":"ecosystem","source":"registry","status":"version_not_found","checkedAt":"2026-10-29T21:30:43.522Z"}]}}