Skip to content
Threat Feed
Subscribe

Vendor

QuantumNous

2 briefs RSS
high advisory

New API: SSRF Protection Bypass via Unresolved Hostname in Notification URLs

An SSRF protection bypass vulnerability, CVE-2026-33655, in the QuantumNous new-api, affecting versions prior to v0.12.0-alpha.1, allows authenticated users to send requests to internal HTTP services by configuring notification URLs with unresolved hostnames, leading to potential sensitive internal data exposure through timing, errors, or response-dependent behavior.

new-api ssrf api vulnerability bypass web-application
2t
high advisory

QuantumNous new-api SSRF Bypass via 0.0.0.0

The QuantumNous new-api is vulnerable to SSRF attacks. The SSRF protection implemented in versions v0.9.0.5 (CVE-2025-59146) and v0.9.6 (CVE-2025-62155) can be bypassed by using the address `0.0.0.0`. An attacker with a valid API token can send a request to `/v1/chat/completions`, `/v1/responses`, or `/v1/messages` with `0.0.0.0` as the image/file URL host, which bypasses the private-IP filter and allows the server to issue HTTP requests to localhost, enabling a blind SSRF and possibly a full-read SSRF in specific configurations.

new-api ssrf vulnerability quantumnous
2r 1t 2c 2i