CVE-2026-119712— PipesHub before 0.10.0 SSRF via Image URLs in Indexed Documents

Quick assessment

Affected

pipeshub-ai pipeshub-ai

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

PipesHub 0.10.0 之前的版本在中存在服务端请求伪造（SSRF）漏洞。攻击者可通过在文档中嵌入图片 URL，诱使索引服务访问内部地址。攻击者可利用上传、同步邮箱或 Web 连接器提交 Markdown 或 HTML 内容，从而访问回环地址、私有网络地址或云元数据端点，并将图片响应嵌入到索引内容中。

CVSS 6.4 · Medium Updated Oct 30, 2026

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

PipesHub before 0.10.0 SSRF via Image URLs in Indexed Documents

Source: CVE Program / CVE List V5

Vulnerability Description

PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser._fetch_single_url that allows attackers to make the indexing service fetch internal addresses by embedding image URLs in documents. Attackers can supply Markdown or HTML via uploads, synced mailboxes, or web connectors to reach loopback, private-network, or cloud metadata endpoints, with image responses embedded into indexed content.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

服务端请求伪造(SSRF)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
pipeshub-ai	pipeshub-ai	0 ~ 0.10.0	-

II. Public POCs for CVE-2026-119712

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-119712

请登录查看更多情报信息。

Other References for CVE-2026-119712 (6)

https://github.com/pipeshub-ai/pipeshub-ai product
https://github.com/pipeshub-ai/pipeshub-ai/commit/16b05ed7c4c492330046fa10753389a5a5886613 patch
https://github.com/pipeshub-ai/pipeshub-ai/blob/v0.9.1/backend/python/app/modules/parsers/image_parser/image_parser.py technical-description
https://github.com/pipeshub-ai/pipeshub-ai/releases/tag/v0.10.0 release-notes
https://github.com/pipeshub-ai/pipeshub-ai/security/advisories/GHSA-mp2g-r37c-fx9q vendor-advisory
https://www.vulncheck.com/advisories/pipeshub-before-0.10.0-ssrf-via-image-urls-in-indexed-documents third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-119712

Same Patch Batch · pipeshub-ai · 2026-10-30 · 3 CVEs total

CVE-2026-119710	7.1 HIGH	PipesHub 0.3.0 before 0.10.0 Connector Deletion via Crawling-Manager Schedule Route
CVE-2026-119711	5.3 MEDIUM	PipesHub before 0.10.0 Rate Limit Bypass via Spoofed X-Forwarded-For Header

IV. Related Vulnerabilities

Same product: pipeshub-ai

Same vendor: pipeshub-ai

Same weakness: CWE-918