Kortix Ai
Monthly
Server-side request forgery in Kortix Suna 0.10.7 through 0.13.51 allows an authenticated user holding the project.connector.write permission to bypass the isPrivateIp egress guard by encoding connector base_url, OpenAPI, Postman, or MCP endpoints as IPv6 6to4 (2002::/16) or Teredo (2001:0::/32) addresses whose embedded IPv4 points at an internal host or the 169.254.169.254 cloud metadata endpoint. Exploitation reaches internal-only services and metadata and returns the fetched responses to the attacker, but impact is capped at low confidentiality and integrity with no availability loss and no scope escape beyond the connector fetch path. Publicly available exploit code exists (a technical writeup linked from the CVE record), and the issue is fully remediated in v0.13.52; there is no confirmed active exploitation (CISA KEV) for this CVE.
Server-side request forgery in Kortix Suna 0.10.7 through 0.13.51 allows an authenticated user holding the project.connector.write permission to bypass the isPrivateIp egress guard by encoding connector base_url, OpenAPI, Postman, or MCP endpoints as IPv6 6to4 (2002::/16) or Teredo (2001:0::/32) addresses whose embedded IPv4 points at an internal host or the 169.254.169.254 cloud metadata endpoint. Exploitation reaches internal-only services and metadata and returns the fetched responses to the attacker, but impact is capped at low confidentiality and integrity with no availability loss and no scope escape beyond the connector fetch path. Publicly available exploit code exists (a technical writeup linked from the CVE record), and the issue is fully remediated in v0.13.52; there is no confirmed active exploitation (CISA KEV) for this CVE.