CVE-2026-116678— Vaultwarden: Icon endpoint SSRF fix bypass via second-stage favicon IP literal URLs

Quick assessment

Affected

dani-garcia vaultwarden

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Vaultwarden 是一个用 Rust 编写的、兼容 Bitwarden 的服务器。在 1.37.0 版本之前，Vaultwarden 的图标下载器虽然会验证初始图标主机及其 DNS 解析结果，但在从攻击者控制的 HTML 中解析出 favicon URL 后，会直接将这些 URL 传递给 get_page_with_referer() 函数，却未对第二阶段的主机应用 should_block_host() 检查。该缺陷绕过了 CVE-2026-47160 的修复措施（该修复涵盖了十进制、十六进制、八进制以及

CVSS 5.8 · Medium Updated Oct 28, 2026

Possible ATT&CK Techniques 3 AI

T1190 · Exploit Public-Facing Application T1071.001 · Web Protocols T1090.002 · External Proxy

Affected Version Matrix 1

Vendor	Product	Version Range	Status
dani-garcia	vaultwarden	`< 1.37.0`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Vaultwarden: Icon endpoint SSRF fix bypass via second-stage favicon IP literal URLs

Source: CVE Program / CVE List V5

Vulnerability Description

Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to version 1.37.0, the Vaultwarden icon downloader validates the initial icon host and DNS results but passes favicon URLs parsed from attacker-controlled HTML to get_page_with_referer() without applying should_block_host() to the second-stage host. This flaw bypasses the remediation for CVE-2026-47160, which covered decimal, hexadecimal, octal, and IPv4-mapped IPv6 host normalization, because the second-stage IP-literal favicon fetch does not invoke the custom DNS resolver. A remote unauthenticated attacker can provide a public page whose favicon uses an IP-literal URL, allowing the Vaultwarden server to reach loopback or private and internal addresses. The issue affects instances with internal icon downloading enabled and can expose internal responses that resemble supported images or reveal reachability through timing, status, and cache behavior. This issue is fixed in version 1.37.0.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

服务端请求伪造(SSRF)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
dani-garcia	vaultwarden	< 1.37.0	-

II. Public POCs for CVE-2026-116678

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-116678

请登录查看更多情报信息。

Other References for CVE-2026-116678 (4)

https://github.com/dani-garcia/vaultwarden/pull/7472 x_refsource_MISC
https://github.com/dani-garcia/vaultwarden/releases/tag/1.37.0 x_refsource_MISC
https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-hw4g-2v3f-74x5 x_refsource_CONFIRM
https://github.com/dani-garcia/vaultwarden/commit/46ae59eaf444f0ae0a799070cf2bd6c415284a51 x_refsource_MISC

https://www.cve.org/CVERecord?id=CVE-2026-116678

IV. Related Vulnerabilities

Same product: vaultwarden

Same vendor: dani-garcia

Same weakness: CWE-918