EUVD-2026-51656
GHSA-xw47-r6m7-qrhr
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
PR:L confirmed by 'authenticated attackers' in description; C:H reflects SSRF access to internal resources; I:N and A:N as SSRF here enables read-only internal probing with no modification or disruption capability.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
4DescriptionCVE.org
A Server-Side Request Forgery (SSRF) in the xxl-job-admin/jobinfo/trigger component of xxl-job v3.4.0 allows authenticated attackers to scan resources via supplying a crafted HTTP request.
AnalysisAI
Server-Side Request Forgery in xxl-job v3.4.0's job trigger endpoint enables authenticated low-privilege users to weaponize the admin server as a proxy to scan and probe internal network resources. The CVSS vector (PR:L, C:H) confirms that any credentialed xxl-job-admin user can exfiltrate data from internal services reachable by the server, including cloud metadata endpoints and private APIs. A public proof-of-concept exploit exists on GitHub; however, EPSS at 0.16% (6th percentile) indicates minimal observed exploitation activity, and no CISA KEV listing has been issued.
Technical ContextAI
xxl-job is an open-source distributed task scheduling platform implemented in Java, widely used in enterprise environments especially within the Chinese developer ecosystem. The /xxl-job-admin/jobinfo/trigger endpoint allows operators to manually trigger scheduled job execution against registered executor nodes. CWE-918 (Server-Side Request Forgery) arises here because user-controlled input - likely an executor address or callback URL parameter in the trigger request - is consumed by a server-side HTTP client without adequate allowlist validation or URL scheme restriction. This allows an attacker to redirect outbound server requests to arbitrary internal destinations. CPE data provided (cpe:2.3:a:n/a:n/a) is non-specific and does not yield vendor-canonical CPE strings; affected product identity is sourced from the description and the EUVD entry EUVD-2026-51656.
RemediationAI
No vendor-released patch has been identified at time of analysis for xxl-job v3.4.0. Operators should monitor the official xxl-job repository and the VulDB advisory (https://vuldb.com/vuln/385148) for patch releases. As immediate compensating controls: restrict access to the xxl-job-admin interface to a minimal set of trusted, authenticated internal users and enforce strong credential policies to reduce exposure from low-privilege account compromise. Implement strict network egress filtering on the host running xxl-job-admin, blocking outbound requests to RFC-1918 address ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16), link-local ranges (169.254.0.0/16 - cloud metadata), and loopback (127.0.0.0/8); note that overly broad egress restriction may disrupt legitimate executor communication. Alternatively, use a reverse proxy or WAF rule to block or monitor requests to the /xxl-job-admin/jobinfo/trigger endpoint from non-administrative sources, accepting reduced operational flexibility as a trade-off. The public POC at https://github.com/RichardKabuto/xxl-job-ssrf-poc can assist in validating whether mitigations are effective.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today