CVE-2026-111320

Received Received - Intake

Unauthenticated SSRF in ValueCell via Provider Base_URL

Publication date: 2026-10-15

Last updated on: 2026-10-15

Assigner: VulnCheck

Description

ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to direct backend requests by setting an unvalidated provider base_url. Attackers can set base_url via the provider config endpoint and trigger POST /api/v1/models/check to reach internal or metadata addresses, read error responses, and capture stored provider API keys.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-15

Last Modified

2026-10-15

Generated

2026-10-16

AI Q&A

2026-10-16

EPSS Evaluated

N/A

NVD

CVE-2026-111320

Affected Vendors & Products

Vendor	Product	Version / Range
ValueCell-ai	ValueCell	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-918	The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

Executive Summary

ValueCell through 0.1.20 has an unauthenticated server-side request forgery (SSRF) vulnerability. Attackers can set an unvalidated provider base_url via the provider config endpoint, then trigger POST /api/v1/models/check to direct backend requests to internal or metadata addresses. This allows reading error responses and capturing stored provider API keys.

Detection Guidance

Check for unauthorized POST requests to /api/v1/models/check with unvalidated base_url parameters. Monitor network traffic for internal or metadata address requests originating from ValueCell instances.

Impact Analysis

An attacker could exploit this to access internal systems, exfiltrate sensitive data like API keys, or perform unauthorized actions on behalf of the application. This may lead to data breaches, service disruption, or further compromise of connected systems.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR and HIPAA requirements for data protection and access controls. Organizations may face fines, legal penalties, and reputational damage due to non-compliance.

Mitigation Strategies

Update ValueCell to the latest version beyond 0.1.20. Restrict network access to the provider config endpoint. Validate all base_url inputs to prevent SSRF attacks. Rotate any exposed provider API keys.

Hi! I’m here to help you understand CVE-2026-111320. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70