CVE-2026-102983— Astro: Netlify Image CDN allowlist bypass enables SSRF
Quick assessment
Affected
withastro astro
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Astro 是一个面向内容驱动型网站的 Web 框架。在 5.2.0 至 8.2.4 版本中，@astrojs/netlify 适配器在生成用于 Netlify Image CDN 远程图像白名单的正则表达式时，未将其锚定到 URL 的起始位置。由于 Netlify 使用 RegExp.test() 方法评估这些表达式，若某个被允许的源（origin）仅出现在源 URL 的路径或查询参数中，即可满足 image.domains 或 image.remotePatterns 的配置要求，而 URL 的实际主机名（ho
Possible ATT&CK Techniques 1 AI
T1071.001 · Web Protocols
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-102983
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Astro: Netlify Image CDN allowlist bypass enables SSRF
Source: CVE Program / CVE List V5
Vulnerability Description
Astro is a web framework for content-driven websites. From 5.2.0 until 8.2.4, the @astrojs/netlify adapter generates regular expressions for Netlify Image CDN remote-image allowlists without anchoring them to the beginning of the URL. Because Netlify evaluates these expressions with RegExp.test(), an allowed origin appearing only in a source URL's path or query can satisfy image.domains or image.remotePatterns while the URL's actual host remains attacker-controlled. An unauthenticated request to the public /.netlify/images endpoint can therefore cause the Image CDN to request attacker-selected URLs and may probe or reach internal services. Netlify egress protections may constrain reachable targets, and image transformation limits direct response exfiltration; no confidentiality or integrity impact has been demonstrated. This issue is fixed in version 8.2.4.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
宽松定义的正则表达式
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-102983
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-102983
请登录查看更多情报信息。
Other References for CVE-2026-102983 (4)
-
https://github.com/withastro/astro/pull/17752 x_refsource_MISC
-
https://github.com/withastro/astro/security/advisories/GHSA-4233-jc72-56c5 x_refsource_CONFIRM
IV. Related Vulnerabilities
Same product: astro
-
CVE-2026-102984
Astro: Malformed port in the Host header can crash the Node -
CVE-2026-84376
Astro: Authorization bypass from missing path-segment bounda -
CVE-2026-73424
Astro: Unauthenticated path override in the @astrojs/vercel -
CVE-2026-73425
@astrojs/netlify generates an overly-broad Netlify Image CDN -
CVE-2026-73423
Astro: composable `astro/hono` pipeline bypasses `security.c
Same vendor: withastro
-
CVE-2026-102984
Astro: Malformed port in the Host header can crash the Node -
CVE-2026-84376
Astro: Authorization bypass from missing path-segment bounda -
CVE-2026-73424
Astro: Unauthenticated path override in the @astrojs/vercel -
CVE-2026-73425
@astrojs/netlify generates an overly-broad Netlify Image CDN -
CVE-2026-73423
Astro: composable `astro/hono` pipeline bypasses `security.c
Same weakness: CWE-625
-
CVE-2026-79965
Dell Secure Connect Gateway 输入验证错误漏洞 -
CVE-2026-82726
AshPhoenix get_subdomain maps a crafted or differently-cased -
CVE-2026-19278
Stackrox: stackrox: privilege escalation via unanchored regu -
CVE-2026-64940
Nishishi Factory Tegalog -Fumy Otegaru Memo Logger 输入验证错误漏洞 -
CVE-2026-44587
CarrierWave has a denylisted_content_type bypass via Unescap
V. Comments for CVE-2026-102983
No comments yet