CVE-2026-111321

Received Received - Intake

Server-Side Request Forgery in TaskingAI

Publication date: 2026-10-15

Last updated on: 2026-10-15

Assigner: VulnCheck

Description

TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send arbitrary HTTP requests by supplying an unvalidated OpenAPI servers[0].url in a user-defined action. Attackers holding a project API key or console admin login can create an action pointing to loopback, internal or cloud metadata addresses and run it via POST /actions/{action_id}/run to read back up to 64 KiB of responses.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-15

Last Modified

2026-10-15

Generated

2026-10-16

AI Q&A

2026-10-16

EPSS Evaluated

N/A

NVD

CVE-2026-111321

Affected Vendors & Products

Vendor	Product	Version / Range
TaskingAI	TaskingAI	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-918	The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

Executive Summary

TaskingAI through version 0.3.0 has a server-side request forgery (SSRF) vulnerability. Authenticated attackers can exploit this by creating a user-defined action with an unvalidated OpenAPI servers URL pointing to internal, loopback, or cloud metadata addresses. When the action is executed via POST /actions/{action_id}/run, the backend sends arbitrary HTTP requests and returns up to 64 KiB of responses.

Detection Guidance

Detecting this SSRF vulnerability requires monitoring for unusual HTTP requests originating from the TaskingAI backend. Check server logs for POST requests to /actions/{action_id}/run with suspicious URLs in the OpenAPI servers[0].url field. Inspect network traffic for connections to loopback, internal, or cloud metadata addresses from the TaskingAI process.

Impact Analysis

If you are an authenticated user with a project API key or console admin access, an attacker could use this vulnerability to access internal systems, read sensitive data, or interact with cloud metadata services. This may lead to unauthorized information disclosure or further network compromise.

Compliance Impact

This vulnerability could lead to unauthorized data access, potentially violating GDPR's data protection requirements or HIPAA's safeguards for protected health information. Organizations using TaskingAI may face compliance violations if sensitive data is exposed through this SSRF flaw.

Mitigation Strategies

Upgrade TaskingAI to the latest version beyond 0.3.0. Restrict network access for the TaskingAI backend to prevent outbound connections. Validate and sanitize all user-supplied OpenAPI URLs in actions. Implement strict allowlisting for allowed domains in the OpenAPI configuration.

Hi! I’m here to help you understand CVE-2026-111321. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70