Which versions of Python are affected by CVE-2026-45568?

The zrok Python SDK ProxyShare (versions 0.4.47-1.1.11) contains a critical server-side request forgery vulnerability that allows any unauthenticated user to bypass intended access controls and…. A patch is available.

How to fix or mitigate CVE-2026-45568?

Within 24 hours: Identify all systems and deployments using zrok versions 0.4.47 through 1.1.11 and disable ProxyShare functionality if not operationally critical; block or restrict network access to affected zrok instances from untrusted networks. Within 7 days: implement network segmentation to restrict proxy egress to only authorized internal services, deploy Web Application Firewall (WAF) rules to detect and block absolute URLs in ProxyShare request paths, and establish continuous monitoring for suspicious internal service access patterns through zrok proxies. Within 30 days: evaluate vendor patches or security updates for zrok; if no upstream fix is available, migrate to an alternative proxy sharing solution or replace zrok deployments with a patched version.

Python CVE-2026-45568

Q: What is the CVSS score of CVE-2026-45568?

CVE-2026-45568 has a CVSS 4.0 base score of 9.9 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-44972 CRITICAL

Path Traversal (CWE-22)

2026-05-19 https://github.com/openziti/zrok

GHSA-jh67-hwqw-m5r7 PYSEC-2026-577

Python Path Traversal

9.9

CVSS 4.0 · Vendor: https://github.com/openziti/zrok

Severity by source

Vendor (https://github.com/openziti/zrok) PRIMARY

9.9 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (https://github.com/openziti/zrok) · only source for this CVE.

CVSS VectorVendor: https://github.com/openziti/zrok

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Patch available

Jul 16, 2026 - 19:33 EUVD

Analysis Updated

Jul 16, 2026 - 17:28 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Jul 16, 2026 - 17:22 vuln.today

cvss_changed

CVSS changed

Jul 16, 2026 - 17:22 NVD

9.9 (CRITICAL)

Source Code Evidence Fetched

May 19, 2026 - 16:00 vuln.today

Analysis Generated

May 19, 2026 - 16:00 vuln.today

DescriptionCVE.org

Summary

Alice exposes a Python SDK ProxyShare with a fixed target URL. Bob sends a request to the share with an absolute URL in the path. The Flask handler passes that path to urllib.parse.urljoin, which replaces Alice's configured target host with Bob's host and returns the server-side response to Bob.

Details

The Python SDK proxy route accepts every path under the share:

python

@app.route('/', defaults={'path': ''}, methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
@app.route('/<path:path>', methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
def proxy(path):

It constructs the outbound URL with urljoin and then sends the request:

python

url = urllib.parse.urljoin(self.target, path)
resp = requests.request(
    method=request.method,
    url=url,
    headers={key: value for (key, value) in request.headers
             if key.lower() not in HOP_BY_HOP_HEADERS},
    data=request.get_data(),
    cookies=request.cookies,
    allow_redirects=False,
    stream=True,
    verify=self.verify_ssl
)

When path is http://127.0.0.1:19190/metadata, urljoin(self.target, path) returns http://127.0.0.1:19190/metadata. The proxy sends the request to Bob's chosen URL rather than Alice's target.

AnalysisAI

Server-side request forgery in the zrok Python SDK ProxyShare (pip/zrok 0.4.47 through 1.1.11) lets any viewer of a share coerce the proxy host into requesting arbitrary internal or loopback services and returns the response to the attacker. Because the Flask handler forwards the client-supplied path through urllib.parse.urljoin, an absolute URL in the request path overrides the share owner's fixed target host. No public exploit has been identified at time of analysis and EPSS is low (0.06%), but the CVSS 4.0 base score is 9.9 given unauthenticated network reach.