EUVD-2026-52435
GHSA-4xp8-858j-g46w
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible unauthenticated SSRF with no scope change; low confidentiality and integrity from internal resource access; no availability impact supported by the description.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
3DescriptionCVE.org
A security vulnerability has been detected in jina-ai reader up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1. This issue affects the function isValidTLD of the file /backend/functions/src/cloud-functions/crawler.ts of the component Crawler/Puppeteer. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way.
AnalysisAI
Server-side request forgery in jina-ai Reader's Puppeteer-based crawler allows unauthenticated remote attackers to manipulate the isValidTLD function to coerce the server into issuing arbitrary HTTP requests to internal or restricted network targets. All deployments up to commit 1574bfd380d249c86c82db4dace0d9c8fe17e2b1 are affected with no vendor-issued patch, as the maintainers did not respond to disclosure. A public proof-of-concept exploit exists (no CISA KEV listing), and the rolling release model means there is no safe pinned version for operators to target.
Technical ContextAI
jina-ai Reader (CPE: cpe:2.3:a:jina-ai:reader:*:*:*:*:*:*:*:*) is an AI-powered web content ingestion service that uses Puppeteer - a headless Chromium automation library - to fetch and process remote URLs as cloud functions. The vulnerable component is the isValidTLD function within /backend/functions/src/cloud-functions/crawler.ts. The root cause is CWE-918 (Server-Side Request Forgery): user-controlled URL or domain inputs are insufficiently validated before being passed to Puppeteer for fetching, allowing attackers to supply URLs that resolve to internal RFC 1918 addresses, cloud metadata endpoints (e.g., AWS IMDSv1 at 169.254.169.254), or other restricted services. Puppeteer's full browser stack can follow redirects and handle complex schemes, expanding the SSRF attack surface beyond simple HTTP libraries.
RemediationAI
No vendor-released patch has been identified at time of analysis - the vendor did not respond to responsible disclosure. Operators should inspect the git history of /backend/functions/src/cloud-functions/crawler.ts for commits newer than 1574bfd380d249c86c82db4dace0d9c8fe17e2b1 that harden the isValidTLD function before upgrading, as no officially confirmed fix commit is available. As immediate compensating controls: restrict network egress from the Puppeteer/crawler process to an explicit allowlist of external domains, blocking RFC 1918 ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16), link-local addresses (169.254.0.0/16, which hosts cloud metadata services), and loopback. If cloud-hosted on AWS, enforce IMDSv2 to neutralize metadata-based credential theft via SSRF - note this does not eliminate the SSRF itself but limits its blast radius. Placing the crawler behind a forward HTTP proxy that enforces domain allowlisting is a stronger control, though it may restrict intended crawl functionality. Monitor VulDB at https://vuldb.com/vuln/385566 for vendor patch confirmation.
Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acro
Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acro
Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acro
Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acro
Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acro
Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acro
Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acro
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acro
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and
An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, ver
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, versio
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today