Zylon - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/vendors/zylon/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSun, 25 Oct 2026 04:25:53 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgZylon PrivateGPT: Server-side request forgery (CVE-2026-116000)https://feed.craftedsignal.io/briefs/2026-10-zylon-privategpt-ssrf/Sun, 25 Oct 2026 04:25:53 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-zylon-privategpt-ssrf/A server-side request forgery vulnerability in Zylon PrivateGPT versions 1.0.0 and 1.0.1 allows remote attackers to perform unauthorized requests via the URI Artifact Loader component.A server-side request forgery (SSRF) vulnerability exists in the URI Artifact Loader component of Zylon PrivateGPT, specifically within the load_file_from_uri function of private_gpt/server/ingest/uri_loader.py. The vulnerability arises from improper handling of the Value argument, which can be manipulated by a remote attacker to force the server to make unintended network requests. Public exploit code for this vulnerability is available. The vendor has not responded to vulnerability disclosures.

Impact

Successful exploitation allows a remote attacker to perform SSRF, potentially accessing internal services, scanning private network segments, or exfiltrating sensitive data from the host environment or internal network accessible to the PrivateGPT server.

Recommendation

Prioritize the identification and isolation of internet-facing Zylon PrivateGPT instances. Given the lack of a vendor response or patch, restrict network access to these instances using egress filtering to prevent unauthorized internal requests.

]]>highadvisoryssrfvulnerabilitywebserver