HighVulnerability
GHSA-7j2f-6h2r-6cqc: Koel Vulnerable to SSRF via Podcast Episode Enclosure URLs
- Identifiers
- CVE-2026-47260GHSA-7j2f-6h2r-6cqc
- Published
- Record updated
- Affected
- phanan/koel <= 9.3.4
- Fixed in
- 9.3.5
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.4%
Summary
Koel validates podcast feed URLs with the SafeUrl rule, but episode enclosure URLs parsed from RSS XML are stored in the database without SSRF checks. When an episode plays, the server downloads the full response from that unvalidated URL through Http::sink()->get() and streams it back to the user, enabling full-read SSRF against internal services such as cloud metadata endpoints.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- MediumCVE-2026-108759: mistral.rs sandbox escape via symlinks in mistralrs-code-execSimilar attack · NVD/CVE Database
- MediumCVE-2026-108575: BerriAI LiteLLM improper authorization in secret resolution via api_keySimilar attack · NVD/CVE Database
- MediumCVE-2026-108574: BerriAI LiteLLM authorization bypass in session spend log view via session_idSimilar attack · NVD/CVE Database
- MediumCVE-2026-108670: JeecgBoot missing authorization in AiragPromptsControllerSimilar attack · NVD/CVE Database
- MediumCVE-2026-108600: open-multi-agent link following flaw in file_write tool sandboxSimilar attack · NVD/CVE Database