CVE-2026-18647

Received Received - Intake

Server-Side Request Forgery in Jina Reader

Publication date: 2026-08-03

Last updated on: 2026-08-03

Assigner: VulDB

Description

A security vulnerability has been detected in jina-ai reader up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1. This issue affects the function isValidTLD of the file /backend/functions/src/cloud-functions/crawler.ts of the component Crawler/Puppeteer. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-03

Last Modified

2026-08-03

Generated

2026-08-04

AI Q&A

2026-08-04

EPSS Evaluated

N/A

NVD

CVE-2026-18647

Affected Vendors & Products

Vendor	Product	Version / Range
jina-ai	reader	to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-918	The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

Executive Summary

This vulnerability is a server-side request forgery (SSRF) in the jina-ai reader up to a specific commit hash. It exists in the isValidTLD function of the crawler.ts file, allowing attackers to manipulate the application into making unauthorized requests to internal or external systems. The issue was publicly disclosed and may already be exploited.

Detection Guidance

Detection requires checking for server-side request forgery (SSRF) in jina-ai reader versions up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1. Inspect network logs for unusual outbound requests from the crawler component. Monitor for unexpected internal or external resource access attempts.

Impact Analysis

An attacker could exploit this to send crafted requests from your server, potentially accessing internal resources, exfiltrating data, or launching further attacks against other systems. This could lead to data breaches, unauthorized access, or service disruption if the server is part of a larger infrastructure.

Compliance Impact

This SSRF vulnerability could violate compliance requirements such as GDPR (data protection) or HIPAA (health data privacy) by enabling unauthorized data access or exfiltration. Organizations may face legal penalties, reputational damage, or loss of certification if exploited.

Mitigation Strategies

Immediately update jina-ai reader to the latest version if available. If no update exists, disable the crawler component or restrict its network access. Implement strict input validation for TLD checks and block suspicious outbound requests at the firewall level.

Hi! I’m here to help you understand CVE-2026-18647. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70