What is the CVSS score of CVE-2026-45806?

CVE-2026-45806 has a CVSS 3.1 base score of 7.7 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N.

Which versions of Penpot are affected by CVE-2026-45806?

Penpot versions before 2.15.0 allow authenticated file editors to access internal company systems through the remote image import feature.. A patch is available.

How to fix or mitigate CVE-2026-45806?

Within 24 hours, audit all Penpot deployments to determine current versions and identify users with file editor privileges. Within 7 days, test Penpot 2.15.0 in a staging environment and plan a production upgrade timeline. Within 30 days, deploy version 2.15.0 across all production Penpot instances and verify successful patching.

Penpot CVE-2026-45806

EUVD-2026-44698 HIGH

Server-Side Request Forgery (SSRF) (CWE-918)

2026-07-15 GitHub_M

SSRF Penpot

7.7

CVSS 3.1 · Vendor: GitHub_M

Severity by source

Vendor (GitHub_M) PRIMARY

7.7 HIGH

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Primary rating from Vendor (GitHub_M) · only source for this CVE.

CVSS VectorVendor: GitHub_M

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Patch available

Jul 15, 2026 - 17:48 EUVD

Source Code Evidence Fetched

Jul 15, 2026 - 15:48 vuln.today

Analysis Generated

Jul 15, 2026 - 15:48 vuln.today

CVE Published

Jul 15, 2026 - 15:05 cve.org

HIGH 7.7

DescriptionCVE.org

Penpot is an open-source design tool for design and code collaboration. Prior to 2.15.0, Penpot's remote image import passed the user-controlled url from frontend/src/app/main/data/workspace/media.cljs into the backend RPC method :create-file-media-object-from-url in backend/src/app/rpc/commands/media.clj, where media/download-image in backend/src/app/media.clj used the shared HTTP client without destination filtering, allowing an authenticated file editor to reach internal-only endpoints. This issue is fixed in version 2.15.0.

AnalysisAI

Server-side request forgery in Penpot before 2.15.0 lets an authenticated file editor coerce the backend into fetching attacker-chosen URLs via the remote image import feature, reaching internal-only endpoints that are normally unreachable from the outside. The :create-file-media-object-from-url RPC method passes a user-controlled URL to the shared HTTP client with no destination filtering (CVSS 7.7, scope-changed). …