What is the CVSS score of CVE-2026-61835?

CVE-2026-61835 has a CVSS 3.1 base score of 7.7 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N. EPSS exploitation probability: 0.2%.

Which versions of Directus are affected by CVE-2026-61835?

Directus file management systems before version 12.0.0 contain a server-side request forgery vulnerability enabling authenticated file-upload users to access internal network services and return…. A patch is available.

How to fix or mitigate CVE-2026-61835?

Within 24 hours: audit and revoke file-upload permissions for all non-administrative users in Directus installations; document remaining privileged accounts and their business justification. Within 7 days: implement network segmentation and firewall rules preventing Directus application servers from accessing internal-only networks and services; enable comprehensive logging on all /files/import endpoint requests. Within 30 days: upgrade to Directus 12.0.0 or later when patch becomes available; if immediate upgrade is not feasible, consider temporarily disabling the file import feature or restrict it to isolated upload services pending patch release.

Directus CVE-2026-61835

EUVD-2026-44672 HIGH

Server-Side Request Forgery (SSRF) (CWE-918)

2026-07-15 GitHub_M

GHSA-j5h6-vqc3-phqh

SSRF Apple Directus

7.7

CVSS 3.1 · Vendor: GitHub_M

Severity by source

Vendor (GitHub_M) PRIMARY

7.7 HIGH

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

vuln.today AI

7.7 HIGH

Network-reachable SSRF needing only low-privilege upload rights (PR:L) and no interaction; scope changes to internal systems (S:C) with high confidentiality but no integrity/availability impact.

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N

Primary rating from Vendor (GitHub_M).

CVSS VectorVendor: GitHub_M

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Patch available

Jul 15, 2026 - 17:48 EUVD

Source Code Evidence Fetched

Jul 15, 2026 - 15:18 vuln.today

Analysis Generated

Jul 15, 2026 - 15:18 vuln.today

CVE Published

Jul 15, 2026 - 14:16 cve.org

HIGH 7.7

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

2 npm packages depend on directus (1 direct, 1 indirect)

Ecosystem-wide dependent count for version 12.0.0.

DescriptionCVE.org

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 12.0.0, the SSRF protection on Directus's file-import-from-URL feature can be bypassed using the address 0.0.0.0 because api/src/request/is-denied-ip.ts treats 0.0.0.0 as a keyword for local interfaces but never blocks the literal address itself. On Linux and macOS, connecting to 0.0.0.0 reaches localhost, so an authenticated user with file-upload rights can make the server fetch internal services through the /files/import endpoint and retrieve the response as a downloadable file. This issue is fixed in version 12.0.0.

AnalysisAI

Server-side request forgery in Directus before 12.0.0 lets an authenticated user with file-upload rights abuse the /files/import endpoint to make the server fetch internal-only services and return their responses as downloadable files. The flaw stems from an incomplete SSRF denylist in api/src/request/is-denied-ip.ts, which treated 0.0.0.0 as a keyword but never blocked the literal address, so on Linux and macOS a request to 0.0.0.0 resolves to localhost and bypasses the protection. No public exploit identified at time of analysis and it is not in CISA KEV; EPSS was not provided.

Technical ContextAI

Directus is a widely used open-source headless CMS/real-time data platform (cpe:2.3:a:directus:directus) that exposes SQL database content through an API and admin app. Its file-import-from-URL feature (POST /files/import) instructs the server to fetch a remote URL, a classic SSRF-prone design (CWE-918, Server-Side Request Forgery). Directus mitigates this with an IP denylist in api/src/request/is-denied-ip.ts, but the code special-cased the string 0.0.0.0 as a keyword for local interfaces without blocking the literal 0.0.0.0 address. On Linux and macOS the kernel routes connections to 0.0.0.0 to the loopback interface (localhost), so the denylist gap allowed the server to reach services bound to 127.0.0.1. The upstream fix (PR #27606, commit f75b25f) broadens the denylist by parsing the 0.0.0.0/8 subnet and blocking the IPv6 unspecified address ::.

RemediationAI

Vendor-released patch: upgrade Directus to version 12.0.0 or later, which updates the IP denylist to parse the 0.0.0.0/8 subnet and block the IPv6 unspecified address :: (per PR #27606 and commit f75b25f); see the advisory at https://github.com/directus/directus/security/advisories/GHSA-j5h6-vqc3-phqh and release https://github.com/directus/directus/releases/tag/v12.0.0. If you cannot upgrade immediately, reduce risk by revoking file-upload/import permissions from untrusted or non-essential roles so fewer accounts can invoke /files/import (trade-off: breaks legitimate URL-import workflows for those roles), and by placing an egress firewall or proxy in front of the Directus server that blocks outbound connections from the app to loopback, link-local, and internal RFC1918 ranges including 0.0.0.0 and :: (trade-off: may break legitimate internal integrations and requires careful allowlisting). Where feasible, disable or restrict the import-from-URL feature at the network layer until the upgrade is applied.