Skip to content
Threat Feed

Vendor

Nautobot

2 briefs RSS
high advisory

Nautobot Webhook SSRF Vulnerability

Nautobot's Webhook feature is vulnerable to server-side request forgery (SSRF), allowing users with `add` or `change` permissions to make requests to unauthorized hosts, which is fixed in versions 2.4.33 and 3.1.2 by introducing settings to restrict webhook functionality.

Nautobot +1 ssrf cve-2026-44797
2r 1t
high advisory

Nautobot GitRepository current_head Field Writable via REST API (CVE-2026-44798)

A user with permissions to modify GitRepository records can manipulate the `current_head` field via the REST API in Nautobot, leading to repository state desynchronization or unavailability; this is remediated in versions 2.4.33 and 3.1.2.

Nautobot +1 gitrepository rest-api privilege-escalation
2r 1t