Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-110719— Portkey AI Gateway 1.14.0 through 1.15.2 SSRF via x-portkey-custom-host Header

Quick assessment

Affected
Portkey-AI gateway
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Portkey AI Gateway 1.14.0 至 1.15.2 存在服务器端请求伪造（SSRF）漏洞。当未设置 TRUSTED_CUSTOM_HOSTS 环境变量时，isValidCustomHost 函数会错误地信任本地回环（localhost）风格的 host 名称，导致未认证的攻击者能够访问本地回环地址以及 Docker 宿主机上的服务。攻击者可通过构造带有恶意 x-portkey-custom-host 头部（例如通过 ollama 提供程序）的 /v1 请求，迫使网关调用内部服务并返回响应内容。

CVSS 7.2 · High EPSS 0.36% · P29

Affected Version Matrix 1

VendorProduct Version RangeStatus
Portkey-AI gateway 1.14.0≤ 1.15.2 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-110719

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Portkey AI Gateway 1.14.0 through 1.15.2 SSRF via x-portkey-custom-host Header
Source: CVE Program / CVE List V5
Vulnerability Description
Portkey AI Gateway 1.14.0 through 1.15.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to reach loopback and Docker host services because isValidCustomHost trusts localhost-style hosts when TRUSTED_CUSTOM_HOSTS is unset. Attackers can send /v1 requests with a crafted x-portkey-custom-host header, such as via the ollama provider, to make the gateway call internal services and return their responses.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Portkey-AI gateway 1.14.0 ~ 1.15.2 -

II. Public POCs for CVE-2026-110719

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-110719

请登录查看更多情报信息。

Vendor Pages for CVE-2026-110719 (1)

Other References for CVE-2026-110719 (3)

IV. Related Vulnerabilities

Same product: gateway
Same vendor: Portkey-AI
Same weakness: CWE-918

V. Comments for CVE-2026-110719

No comments yet

Leave a comment