CVE-2026-116000
Received Received - Intake

Server-Side Request Forgery in Zylon PrivateGPT

Publication date: 2026-10-25

Last updated on: 2026-10-25

Assigner: VulDB

Description
A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function load_file_from_uri of the file private_gpt/server/ingest/uri_loader.py of the component URI Artifact Loader. Performing a manipulation of the argument Value results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-25
Last Modified
2026-10-25
Generated
2026-10-25
AI Q&A
2026-10-25
EPSS Evaluated
N/A
NVD
CVE-2026-116000
EUVD
EUVD-2026-109329

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
Zylon PrivateGPT 1.0.0
Zylon PrivateGPT 1.0.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a server-side request forgery flaw in Zylon PrivateGPT 1.0.0/1.0.1. It affects the URI Artifact Loader component, specifically the load_file_from_uri function in private_gpt/server/ingest/uri_loader.py. Attackers can manipulate the Value argument to perform unauthorized requests, potentially accessing internal resources.

Detection Guidance

Check for unusual requests to the /v1/artifacts/ingest/async endpoint with local file paths like file:///etc/passwd or ../../../../etc/passwd. Monitor Celery worker logs for unexpected file reads or errors related to path validation failures.

Impact Analysis

An attacker could exploit this to read arbitrary files on the server, including sensitive system files like /etc/passwd or configuration files. This could lead to data breaches, unauthorized access to secrets, or further attacks on the system hosting PrivateGPT.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR's data protection principles and HIPAA's security requirements. Organizations using PrivateGPT may face compliance violations, legal penalties, and reputational damage if exploited.

Mitigation Strategies

Disable the Async Ingestion API endpoint if possible. Implement strict URI scheme validation to allow only http:// or https://. Restrict file paths to a safe directory and enforce sandboxing. Update to a patched version if available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-116000. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart