Marqo
Monthly
Server-side request forgery in Marqo ≤ 2.26.0 allows unauthenticated remote attackers to force the server to issue HTTP requests to arbitrary internal or external URLs by supplying attacker-controlled values in media fields of the add_documents API endpoint. The vulnerability originates in the inference orchestrator's image download component - specifically the download_image_from_url and fetch_content_sample functions in image_download.py - which perform no host validation or destination filtering before fetching user-supplied URLs. In cloud-hosted deployments, this enables access to instance metadata endpoints (e.g., AWS IMDSv1 at 169.254.169.254) that can yield IAM role credentials, substantially amplifying the practical impact beyond the moderate CVSS 4.0 base score of 6.9. No public exploit code has been identified and the vulnerability is not in the CISA KEV catalog.
Server-side request forgery in Marqo ≤ 2.26.0 allows unauthenticated remote attackers to force the server to issue HTTP requests to arbitrary internal or external URLs by supplying attacker-controlled values in media fields of the add_documents API endpoint. The vulnerability originates in the inference orchestrator's image download component - specifically the download_image_from_url and fetch_content_sample functions in image_download.py - which perform no host validation or destination filtering before fetching user-supplied URLs. In cloud-hosted deployments, this enables access to instance metadata endpoints (e.g., AWS IMDSv1 at 169.254.169.254) that can yield IAM role credentials, substantially amplifying the practical impact beyond the moderate CVSS 4.0 base score of 6.9. No public exploit code has been identified and the vulnerability is not in the CISA KEV catalog.