CVE-2026-105689— Penpot: SSRF guard bypass via IPv6 transition addresses (NAT64/6to4/Teredo) in webhook delivery and media download
Quick assessment
Affected
penpot penpot
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Penpot 是一个开源的设计与原型制作平台。在版本 2.18.0 之前， 函数依赖 Java 的 谓词来判断地址是否被阻止，但该实现未对 NAT64、6to4 或 Teredo 等 IPv6 过渡地址进行分类处理，且仅对 IPv4 地址应用额外的 CIDR 检查。攻击者需要通过 NAT64 网关或利用其控制的 DNS AAAA 记录进行路由，才能实现漏洞利用；而在已部署 NAT64 网关的云端环境中，该漏洞可直接被利用。拥有媒体导入 URL 控制权的用户，或拥有 Webhook URL 控制权的管理员，可以提交嵌
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-105689
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Penpot: SSRF guard bypass via IPv6 transition addresses (NAT64/6to4/Teredo) in webhook delivery and media download
Source: CVE Program / CVE List V5
Vulnerability Description
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, app.util.ssrf/blocked-address? relies on Java InetAddress predicates that do not classify NAT64, 6to4, or Teredo addresses and applies additional CIDR checks only to IPv4 values. Exploitation requires routing through a NAT64 gateway or an attacker-controlled DNS AAAA record; cloud environments with NAT64 gateways are directly exploitable. A user controlling a media import URL, or an administrator controlling a webhook URL, can then supply an IPv6 transition address that embeds a cloud-metadata, loopback, link-local, or private IPv4 target and bypasses the intended SSRF restrictions. Media import can disclose response bodies, while webhook delivery can expose response status as a network-probing side channel. This issue is fixed in version 2.18.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-105689
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-105689
请登录查看更多情报信息。
Other References for CVE-2026-105689 (3)
-
https://github.com/penpot/penpot/releases/tag/2.18.0 x_refsource_MISC
-
https://github.com/penpot/penpot/security/advisories/GHSA-wxgm-8qjw-x445 x_refsource_CONFIRM
Same Patch Batch · penpot · 2026-10-05 · 12 CVEs total
| CVE-2026-105691 | 9.9 CRITICAL | Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-color |
| CVE-2026-105688 | 6.7 MEDIUM | Penpot: Team admin can escalate to owner via team invitation (missing owner-role guard on |
| CVE-2026-105696 | 6.5 MEDIUM | Penpot: Share-link page-scope escalation: a share-link holder reads pages outside the link |
| CVE-2026-105695 | 5.9 MEDIUM | Penpot: Missing authorization in chunked-upload assembly lets another authenticated user c |
| CVE-2026-105690 | 5.9 MEDIUM | Penpot: Server-side session not invalidated on logout; stale auth-token cookie remains val |
| CVE-2026-105694 | 5.4 MEDIUM | Penpot: Stored XSS via Unsanitised SVG Uploads |
| CVE-2026-105692 | 5.4 MEDIUM | Penpot: IDOR in Share-Link Deletion Allows Any File Editor to Delete Share-Links They Did |
| CVE-2026-105693 | 5.3 MEDIUM | Penpot: Anonymous share-link token disclosure & page-scope bypass via get-view-only-bundle |
| CVE-2026-105686 | 5.3 MEDIUM | Penpot: Repeated chunk index causes temporary-storage amplification |
| CVE-2026-105687 | 4.9 MEDIUM | Penpot: A team admin (non-owner) can remove the team owner via ::delete-team-member — miss |
| CVE-2026-105684 | 4.3 MEDIUM | Penpot: Share-link page-scope escape — comment RPCs leak comment content, author identity, |
IV. Related Vulnerabilities
Same product: penpot
-
CVE-2026-105696
Penpot: Share-link page-scope escalation: a share-link holde -
CVE-2026-105695
Penpot: Missing authorization in chunked-upload assembly let -
CVE-2026-105694
Penpot: Stored XSS via Unsanitised SVG Uploads -
CVE-2026-105693
Penpot: Anonymous share-link token disclosure & page-scope b -
CVE-2026-105692
Penpot: IDOR in Share-Link Deletion Allows Any File Editor t
Same vendor: penpot
-
CVE-2026-105696
Penpot: Share-link page-scope escalation: a share-link holde -
CVE-2026-105695
Penpot: Missing authorization in chunked-upload assembly let -
CVE-2026-105694
Penpot: Stored XSS via Unsanitised SVG Uploads -
CVE-2026-105693
Penpot: Anonymous share-link token disclosure & page-scope b -
CVE-2026-105692
Penpot: IDOR in Share-Link Deletion Allows Any File Editor t
Same weakness: CWE-918
-
CVE-2026-103546
Improper validation of Ops Manager configuration in MongoDB -
CVE-2026-105438
O2OA General url ActionUploadExcelWithUrl server-side reques -
CVE-2026-105682
Ghost: Server-Side Request Forgery in Webhook Trigger -
CVE-2026-105636
Plane: SSRF via HTTP redirect in webhook delivery (allow_red -
CVE-2026-105628
Plane: OAuth Avatar Redirect SSRF Leads to Internal Data Exf
V. Comments for CVE-2026-105689
No comments yet