CVE-2026-85686
Received Received - Intake

Swift SSRF in ms-swift via Unvalidated API Media URLs

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: VulnCheck

Description
ms-swift 4.5.2 contains a server-side request forgery vulnerability in the swift deploy OpenAI-compatible API that fetches multimodal media URLs without validation or redirect filtering. Unauthenticated attackers can supply arbitrary image_url, audio_url, or video_url parameters to make the server issue requests to internal services and cloud metadata endpoints.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-04
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-85686
EUVD
EUVD-2026-71135

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
modelscope ms-swift 4.5.2

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a server-side request forgery (SSRF) in ms-swift 4.5.2. It allows unauthenticated attackers to manipulate the swift deploy OpenAI-compatible API by providing arbitrary URLs for media files (image, audio, or video). The server then fetches these URLs without validating them or filtering redirects, enabling attackers to make requests to internal services or cloud metadata endpoints.

Detection Guidance

To detect this SSRF vulnerability in ms-swift 4.5.2, monitor network traffic for outbound requests from the swift deploy service to internal or cloud metadata endpoints. Check server logs for unusual URLs in image_url, audio_url, or video_url parameters. Use tools like tcpdump or Wireshark to capture requests originating from the vulnerable service.

Impact Analysis

An attacker could exploit this to access internal systems, exfiltrate sensitive data, or interact with cloud services. This may lead to unauthorized data access, service disruption, or further attacks on your infrastructure. The high CVSS score (8.7) indicates significant risk.

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating GDPR's data protection requirements or HIPAA's safeguards for protected health information. Compliance may be compromised if sensitive data is exposed or mishandled due to the SSRF flaw.

Mitigation Strategies

Immediately upgrade ms-swift to a patched version beyond 4.5.2. If upgrading is not possible, disable the swift deploy OpenAI-compatible API or restrict access via firewall rules to prevent unauthorized requests. Implement input validation for URL parameters to block internal or metadata endpoints.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-85686. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart