What is the CVSS score of CVE-2026-30832?

CVE-2026-30832 has a CVSS 3.1 base score of 9.1 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L. EPSS exploitation probability: 0.0%.

Which versions of SSH are affected by CVE-2026-30832?

A critical vulnerability in Soft Serve Git server (CVE-2026-30832) allows authenticated SSH users to force internal HTTP requests to private IP addresses, potentially exposing sensitive internal…. A patch is available.

Is there a public PoC exploit available for CVE-2026-30832?

Yes, a public proof-of-concept exploit is available for CVE-2026-30832. Prioritise patching immediately. EPSS: 0.0%.

SSH CVE-2026-30832

CRITICAL

Server-Side Request Forgery (SSRF) (CWE-918)

2026-03-07 security-advisories@github.com

GHSA-3fvx-xrxq-8jvv

SSH Soft Serve Suse

9.1

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

Low

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

PoC Detected

Mar 11, 2026 - 20:36 vuln.today

Public exploit code

Patch released

Mar 11, 2026 - 20:36 nvd

Patch available

CVE Published

Mar 07, 2026 - 16:15 nvd

CRITICAL 9.1

DescriptionNVD

Soft Serve is a self-hostable Git server for the command line. From version 0.6.0 to before version 0.11.4, an authenticated SSH user can force the server to make HTTP requests to internal/private IP addresses by running repo import with a crafted --lfs-endpoint URL. The initial batch request is blind (the response from a metadata endpoint won't parse as valid LFS JSON), but an attacker hosting a fake LFS server can chain this into full read access to internal services by returning download URLs that point at internal targets. This issue has been patched in version 0.11.4.

AnalysisAI

SSRF in Soft Serve Git server versions 0.6.0 to 0.11.3 allows authenticated attackers to make requests to internal services. PoC and patch available.

RemediationAI

Within 24 hours: Identify all systems running affected Soft Serve versions (0.6.0-0.11.3) and assess which have internet-exposed or multi-tenant access. Within 7 days: Apply vendor patch to version 0.11.4 or later on all affected instances; restrict SSH access to Soft Serve to trusted users only pending patching. …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

More from same product – last 7 days

CVE-2026-9256 HIGH This Week

8.1 May 22

Heap buffer overflow in NGINX Plus and NGINX Open Source ngx_http_rewrite_module allows unauthenticated remote attackers

Vendor StatusVendor

CVE-2026-30832 vulnerability details – vuln.today

Back