{"data":{"id":"654c7159-5aca-41f5-a33e-c0ff2b8e5bc4","title":"CVE-2026-85675: OWL's DocumentProcessingToolkit contains a server-side request forgery vulnerability in the extract_document_content…","summary":"CVE-2026-85675 affects OWL's DocumentProcessingToolkit, specifically its extract_document_content tool. The tool fetches caller-supplied URLs without any scheme, host, or IP filtering. An attacker can inject malicious URLs through prompt injection, causing the server to fetch internal resources, with the responses returned to the agent context.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-85675","publishedAt":"2026-09-04T15:17:45.763Z","cveId":"CVE-2026-85675","cweIds":["CWE-918"],"cvssScore":"7.5","cvssSeverity":"high","severity":"high","attackType":["prompt_injection","supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["OWL","DocumentProcessingToolkit"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00482,"epssCheckedAt":"2026-11-04T06:10:15.563Z","kevDateAdded":null,"advisoryAliases":["GHSA-9c7r-jxm8-hgg2"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-01T18:08:44.270Z","patchAvailable":null,"disclosureDate":"2026-09-04T15:17:45.763Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0010","AML.T0051"],"fixes":[]}}