Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-108741— Shepherd through 0.3.1 SSRF via DNS Rebinding in Citation Checker

Quick assessment

Affected
shepherd-agents Shepherd
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Shepherd (shepherd-ai) 0.3.1 及更早版本中存在服务器端请求伪造（SSRF）防护绕过漏洞。该漏洞位于 citation-checker 额外功能模块中，原因是其 public_url 防护机制仅验证了已解析的 IP 地址，但在实际发起网络请求时，fetch 操作会在连接时刻重新解析主机名。攻击者可在待检查的文档中植入精心构造的参考 URL，并通过控制该 URL 对应的 DNS 记录实现域名重绑定（DNS rebinding），将其指向内部服务的 IP 地址，从而向内部 HTTP/HTTPS

CVSS 3.1 · Low EPSS 0.18% · P7

Affected Version Matrix 1

VendorProduct Version RangeStatus
shepherd-agents Shepherd ≤ 0.3.1 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-108741

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Shepherd through 0.3.1 SSRF via DNS Rebinding in Citation Checker
Source: CVE Program / CVE List V5
Vulnerability Description
Shepherd (shepherd-ai) through 0.3.1 contains a server-side request forgery guard bypass in the citation-checker extra because the public_url guard validates a resolved address but fetch re-resolves the hostname at connect time. Attackers who plant a crafted reference URL in a checked document and control its DNS can rebind it to internal addresses, sending GET requests to internal HTTP(S) services and capturing responses in evidence files.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
检查时间与使用时间(TOCTOU)的竞争条件
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
shepherd-agents Shepherd 0 ~ 0.3.1 -

II. Public POCs for CVE-2026-108741

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-108741

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-108741 (1)

Vendor Advisories for CVE-2026-108741 (1)

Security Blog Posts for CVE-2026-108741 (1)

IV. Related Vulnerabilities

Same weakness: CWE-367

V. Comments for CVE-2026-108741

No comments yet

Leave a comment