CVE-2026-115720— Frappe Builder before 1.36.1 SSRF Guard Bypass via HTTP Redirect

Quick assessment

Affected

frappe builder

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Frappe Builder 在 1.36.1 版本之前存在服务端请求伪造（SSRF）漏洞。该漏洞位于文件中：防护函数仅验证请求的初始主机名，而调用者随后使用发起请求时，默认启用重定向跟随且未实施 IP 固定（IP pinning）。这导致攻击者可构造一个公开 URL，使其通过 HTTP 重定向指向内部网络地址或链路本地地址，而这些地址从未被防护函数验证。已认证的攻击者可调用端点（该端点缺少权限装饰器），传入一个可重定向至内部目标（如云元数据服务）的 URL，从而实施 SSRF 攻击、进行内部端口扫描，或

CVSS 5.0 · Medium Updated Oct 26, 2026

Possible ATT&CK Techniques 3 AI

T1046 · Network Service Discovery T1499 · Endpoint Denial of Service T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Frappe Builder before 1.36.1 SSRF Guard Bypass via HTTP Redirect

Source: CVE Program / CVE List V5

Vulnerability Description

Frappe Builder before 1.36.1 contains a server-side request forgery vulnerability in builder/api.py where the assert_not_private_url() guard validates only the initial hostname before callers invoke requests.get(url) with default redirect-following and no IP pinning, allowing an attacker-supplied public URL to HTTP-redirect to internal or link-local addresses the guard never validated. An authenticated attacker can call the convert_to_webp endpoint, which lacks a permission decorator, with a URL that redirects to internal targets such as cloud metadata services to perform SSRF, internal port scanning, or trigger a request-hang denial of service due to the missing timeout.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

服务端请求伪造(SSRF)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
frappe	builder	1.0.0 ~ 1.36.1	-

II. Public POCs for CVE-2026-115720

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-115720

请登录查看更多情报信息。

Other References for CVE-2026-115720 (3)

https://github.com/frappe/builder/releases/tag/v1.36.1 patch
https://github.com/frappe/builder/security/advisories/GHSA-hvrf-fhv3-3v7p vendor-advisory
https://www.vulncheck.com/advisories/frappe-builder-before-ssrf-guard-bypass-via-http-redirect third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-115720

Same Patch Batch · frappe · 2026-10-26 · 4 CVEs total

CVE-2026-115717	7.7 HIGH	Frappe Builder before 1.36.1 SSRF via convert_to_webp
CVE-2026-116492	6.5 MEDIUM	Frappe CRM before 1.89.1 Missing Authorization via Phone Lookup API
CVE-2026-115718	4.3 MEDIUM	Frappe Builder 1.33.0 before 1.36.0 Missing Authorization via improve_prompt

IV. Related Vulnerabilities

Same product: builder

Same vendor: frappe

Same weakness: CWE-918