CVE-2026-86259
Received Received - Intake

OpenMAIC Non-Production Build SSRF Bypass Exposes Cloud Metadata

Publication date: 2026-09-06

Last updated on: 2026-09-06

Assigner: VulnCheck

Description
OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated attackers to reach cloud instance metadata services. Attackers can supply arbitrary provider URLs via the x-base-url header or baseUrl parameter to access sensitive cloud credentials and metadata.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-06
Last Modified
2026-09-06
Generated
2026-09-06
AI Q&A
2026-09-06
EPSS Evaluated
N/A
NVD
CVE-2026-86259
EUVD
EUVD-2026-72126

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
thu_maic openmaic to 1.0.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Server-Side Request Forgery (SSRF) flaw in OpenMAIC versions before 1.0.1. It allows unauthenticated attackers to bypass security checks in non-production builds by manipulating the x-base-url header or baseUrl parameter. This grants access to cloud instance metadata services, exposing sensitive credentials and metadata.

Detection Guidance

To detect CVE-2026-86259, monitor network traffic for requests containing the x-base-url header or baseUrl parameter pointing to cloud metadata services like AWS IMDS (169.254.169.254). Check OpenMAIC logs for unauthorized outbound requests to internal IP ranges or metadata endpoints. Use tools like curl to test if the system allows bypassing SSRF checks by sending requests with manipulated headers.

Impact Analysis

Attackers can exploit this to access cloud metadata services like AWS IMDS, retrieve IAM role credentials, and escalate privileges across the cloud environment. This may lead to full account compromise, data exfiltration, and unauthorized resource manipulation.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive cloud metadata and credentials, potentially exposing personal data or protected health information. Non-compliance with GDPR may occur if personal data is accessed or exfiltrated due to insufficient access controls. HIPAA violations are possible if protected health information is compromised through the SSRF flaw.

Mitigation Strategies

Immediately upgrade OpenMAIC to version 1.0.1 or later. Ensure fail-closed authentication by setting the ACCESS_CODE environment variable. Disable non-production builds or enforce unconditional SSRF validation regardless of environment. Block outbound requests to metadata service IPs at the network level as a temporary measure.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-86259. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart