CVE-2026-76164

Deferred Deferred - Pending Action

SSRF in AIL Framework via Crawler Submission

Publication date: 2026-08-19

Last updated on: 2026-08-26

Assigner: CIRCL

Description

AIL Framework contains a server-side request forgery (SSRF) vulnerability in its crawler submission functionality. A low-privileged authenticated user with access to the crawler interface can submit an arbitrary URL for crawling without adequate validation of the destination host. The crawler can therefore be instructed to make direct HTTP(S) requests to addresses that should not be reachable by application users, including loopback addresses, RFC1918 private networks, link-local addresses, and cloud metadata services such as 169.254.169.254. Manual crawler tasks bypass the existing domain blacklist because they are assigned a non-zero priority, and ordinary IP literals are classified as web targets and fetched directly rather than through Tor or another proxy. Consequently, an attacker can use the AIL server as a network pivot to access services available from the server's network context. Responses generated by these requests, including captured HTML, screenshots, and HAR data, can subsequently be accessed through the crawler interface. This makes the SSRF non-blind and may allow an attacker to disclose sensitive internal application data, service information, or cloud instance metadata and credentials. The patch introduces validation that resolves crawler destinations and rejects URLs resolving to non-global IP addresses, addressing localhost, private-network, and link-local targets.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-19

Last Modified

2026-08-26

Generated

2026-09-08

AI Q&A

2026-08-19

EPSS Evaluated

2026-09-07

NVD

CVE-2026-76164

EUVD

EUVD-2026-62366

Affected Vendors & Products

Vendor	Product	Version / Range
ail_project	ail_framework	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-918	The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

Executive Summary

CVE-2026-76164 is a server-side request forgery (SSRF) vulnerability in the AIL Framework's crawler submission functionality. A low-privileged authenticated user can submit arbitrary URLs for crawling without proper validation of the destination host. This allows the crawler to make HTTP(S) requests to restricted addresses like loopback, private networks, or cloud metadata services (e.g., 169.254.169.254).

Detection Guidance

Check AIL Framework logs for unusual crawler submissions targeting internal or private IP addresses. Monitor network traffic from the AIL server to detect unauthorized outbound requests to loopback, RFC1918, or link-local addresses.

Impact Analysis

An attacker could use this vulnerability to access internal services or sensitive data from the server's network. The SSRF is non-blind, meaning responses like HTML, screenshots, or HAR data can be retrieved via the crawler interface, potentially exposing cloud instance metadata, credentials, or other confidential information.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements under GDPR and HIPAA. Exposure of internal services or credentials may result in compliance breaches, data leaks, or unauthorized access to protected health or personal information.

Mitigation Strategies

Apply the patch from the AIL Framework commit d7b60ff to enforce validation of crawler destinations. Ensure the new option preventing access to localhost and private networks is enabled by default.

Hi! I’m here to help you understand CVE-2026-76164. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70