CVE-2026-119712
Received Received - Intake

Server-Side Request Forgery in PipesHub ImageParser

Publication date: 2026-10-30

Last updated on: 2026-10-30

Assigner: VulnCheck

Description
PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser._fetch_single_url that allows attackers to make the indexing service fetch internal addresses by embedding image URLs in documents. Attackers can supply Markdown or HTML via uploads, synced mailboxes, or web connectors to reach loopback, private-network, or cloud metadata endpoints, with image responses embedded into indexed content.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-30
Last Modified
2026-10-30
Generated
2026-10-30
AI Q&A
2026-10-30
EPSS Evaluated
N/A
NVD
CVE-2026-119712
EUVD
EUVD-2026-114117

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
pipeshub-ai pipeshub-ai 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

PipesHub before version 0.10.0 has a server-side request forgery (SSRF) vulnerability in the ImageParser._fetch_single_url function. This flaw allows attackers to trick the service into fetching internal network addresses by embedding malicious image URLs in documents. Attackers can exploit this by uploading Markdown or HTML files, syncing mailboxes, or using web connectors to target loopback addresses, private networks, or cloud metadata endpoints. The fetched images are then embedded into indexed content.

Detection Guidance

To detect this vulnerability, monitor network traffic for unexpected outbound requests from PipesHub, especially to internal or private IP addresses. Check logs for image URL parsing attempts or failed fetches. Inspect uploaded documents for embedded Markdown or HTML with image tags pointing to internal endpoints.

Impact Analysis

This vulnerability could allow attackers to access internal systems, exfiltrate sensitive data, or interact with internal services. If exploited, it may lead to unauthorized information disclosure, network reconnaissance, or further attacks on internal infrastructure. Systems running vulnerable versions of PipesHub are at risk of these potential impacts.

Compliance Impact

This vulnerability could lead to violations of data protection regulations like GDPR or HIPAA by enabling unauthorized access to sensitive data. GDPR requires protecting personal data, and HIPAA mandates safeguarding health information. A successful SSRF attack may result in data breaches, triggering compliance violations, legal penalties, and reputational damage for affected organizations.

Mitigation Strategies

Upgrade PipesHub to version 0.10.0 or later. Disable or restrict access to the ImageParser._fetch_single_url functionality if not required. Implement network-level controls to block outbound requests to private or loopback addresses from PipesHub. Review and sanitize all user-uploaded content to prevent malicious Markdown or HTML injection.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-119712. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart