What is the CVSS score of CVE-2026-32301?

CVE-2026-32301 has a CVSS 3.1 base score of 9.3 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N. EPSS exploitation probability: 0.0%.

Which versions of Centrifugo are affected by CVE-2026-32301?

Centrifugo real-time messaging servers prior to version 6.7.0 contain a critical vulnerability allowing unauthenticated attackers to manipulate the server into making unauthorized network requests.. A patch is available.

Is there a public PoC exploit available for CVE-2026-32301?

Yes, a public proof-of-concept exploit is available for CVE-2026-32301. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-32301?

Within 24 hours: Identify all Centrifugo instances in your environment and document their versions and JWKS configurations. Within 7 days: Implement compensating controls (disable dynamic JWKS endpoints if not essential, restrict outbound network access, deploy WAF rules to block malicious JWT claims). Within 30 days: Plan and execute upgrade to Centrifugo 6.7.0 or later, or migrate to alternative solutions if upgrade is not feasible.

Centrifugo CVE-2026-32301

EUVD-2026-11716 CRITICAL

Server-Side Request Forgery (SSRF) (CWE-918)

2026-03-13 security-advisories@github.com

GHSA-j77h-rr39-c552

SSRF Centrifugo Suse

9.3

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

9.3 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

SUSE

CRITICAL

qualitative

Primary rating from GitHub Advisory.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

Low

Availability

None

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

PoC Detected

Mar 18, 2026 - 18:02 vuln.today

Public exploit code

EUVD ID Assigned

Mar 13, 2026 - 20:00 euvd

EUVD-2026-11716

Analysis Generated

Mar 13, 2026 - 20:00 vuln.today

CVE Published

Mar 13, 2026 - 19:54 nvd

CRITICAL 9.3

DescriptionGitHub Advisory

Centrifugo is an open-source scalable real-time messaging server. Prior to 6.7.0, Centrifugo is vulnerable to Server-Side Request Forgery (SSRF) when configured with a dynamic JWKS endpoint URL using template variables (e.g. {{tenant}}). An unauthenticated attacker can craft a JWT with a malicious iss or aud claim value that gets interpolated into the JWKS fetch URL before the token signature is verified, causing Centrifugo to make an outbound HTTP request to an attacker-controlled destination. This vulnerability is fixed in 6.7.0.

AnalysisAI

SSRF in Centrifugo real-time messaging before 6.7.0.

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Craft JWT with malicious iss/aud claim

Exploit

Centrifugo interpolates claim into JWKS URL template

Execution

Server makes HTTP request to attacker destination

Impact

Attacker receives internal network data

Access

Craft JWT with malicious iss/aud claim

Exploit

Centrifugo interpolates claim into JWKS URL template

Execution

Server makes HTTP request to attacker destination

Impact

Attacker receives internal network data

Vulnerability AssessmentAI

Exploitation	Centrifugo configured with dynamic JWKS endpoint URL containing template variables (e.g., {{tenant}}, {{iss}}, {{aud}}). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	CVSS 9.3. Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	SSRF through messaging server.
Remediation	Update. Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours: Identify all Centrifugo instances in your environment and document their versions and JWKS configurations. …

Threat intelligence, references, and detailed analysis are available after sign-in.

Vendor StatusVendor

SUSE

Severity: Critical

Product	Status
openSUSE Leap 15.6	Fixed
SUSE Linux Enterprise Module for Package Hub 15 SP5	Fixed
SUSE Linux Enterprise Module for Package Hub 15 SP6	Fixed
openSUSE Leap 15.5	Fixed

CVE-2026-32301 vulnerability details – vuln.today

Back

Centrifugo CVE-2026-32301

Severity by source

CVSS VectorGitHub Advisory

Lifecycle Timeline

DescriptionGitHub Advisory

AnalysisAI

Unlock full vulnerability intelligence

Attack ChainAIDerived

Vulnerability AssessmentAI

Recommended ActionAI

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code