Cpe:2.3:a:chaskiq:chaskiq:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3achaskiqchaskiq/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 16 Oct 2026 18:49:36 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgCVE-2026-111663: SSRF Vulnerability in Chaskiq GraphQL APIhttps://feed.craftedsignal.io/briefs/2026-10-chaskiq-ssrf/Fri, 16 Oct 2026 18:49:36 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-chaskiq-ssrf/Chaskiq version 2.0.3 and earlier contains a server-side request forgery vulnerability in the createUrlUpload GraphQL mutation, allowing unauthenticated attackers to access internal resources including cloud metadata services.Chaskiq versions up to and including 2.0.3 contain a server-side request forgery (SSRF) vulnerability identified as CVE-2026-111663. This flaw resides within the createUrlUpload GraphQL mutation, which improperly validates user-supplied URLs. An unauthenticated attacker can leverage this endpoint to force the Chaskiq server to make arbitrary HTTP requests to internal network resources, including sensitive cloud instance metadata services (e.g., 169.254.169.254). The application processes these requests and subsequently leaks the contents of the response to the attacker via an ActiveStorage blob URL. This vulnerability represents a significant risk for organizations hosting Chaskiq within cloud environments, as it may facilitate the exfiltration of instance identities, security tokens, or internal network mapping.

Impact

The vulnerability allows unauthenticated attackers to conduct SSRF attacks, potentially leading to unauthorized access to internal network infrastructure or cloud provider service metadata. If exploited, an attacker could extract sensitive configuration data or interact with internal APIs that are not exposed to the public internet, posing a high risk for data breach or deeper network compromise.

Recommendation

  1. Upgrade all instances of Chaskiq to a patched version beyond 2.0.3 immediately to address the vulnerability in the createUrlUpload mutation.
  2. Implement network-level egress filtering on the Chaskiq application server to restrict access to internal IP ranges, specifically blocking requests to 169.254.169.254 and other private RFC1918 address spaces.
  3. Review web server access logs for anomalous POST requests to the /graphql endpoint containing suspicious URL parameters in the createUrlUpload mutation.
]]>highadvisoryssrfgraphqlweb-vulnerability