CVE-2026-125114— Novu: SSRF via conditions filter webhook bypasses validateUrlSsrf() protection

Quick assessment

Affected

novuhq novu

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Novu 提供了一个通过多种渠道发送通知的 API。在 3.15.0 版本之前，位于的“条件过滤 Webhook"功能会将用户配置的直接传递给，而未先调用进行验证。因此，在评估工作流条件时，Worker 可能会向私有地址或链路本地（link-local）服务发送 POST 请求，并将响应数据用于条件评估。该响应会被存储在执行详情中，并通过接口暴露，从而可能泄露具备 POST 能力的元数据服务中的凭证，或内部服务的数据；不过，此路径无法访问那些仅支持 GET 请求的元数据端点。该问题已在 3.15.0 版本

CVSS 8.3 · High Updated Nov 10, 2026

Possible ATT&CK Techniques 3 AI

T1048 · Exfiltration Over Alternative Protocol T1190 · Exploit Public-Facing Application T1602 · Data from Configuration Repository

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Novu: SSRF via conditions filter webhook bypasses validateUrlSsrf() protection

Source: CVE Program / CVE List V5

Vulnerability Description

Novu provides an API for sending notifications through multiple channels. Prior to 3.15.0, the conditions filter webhook in libs/application-generic/src/usecases/conditions-filter/conditions-filter.usecase.ts passes the user-configured child.webhookUrl directly to axios.post without calling validateUrlSsrf. Evaluating a workflow condition can therefore make the worker send a POST request to a private or link-local service and return the response data for condition evaluation. The response is stored in execution details and exposed through GET /execution-details, which can disclose credentials from POST-capable metadata services or data from internal services, although metadata endpoints that require GET are not reachable through this path. This issue is fixed in version 3.15.0.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

Source: CVE Program / CVE List V5

Vulnerability Type

服务端请求伪造(SSRF)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
novuhq	novu	< 3.15.0	-

II. Public POCs for CVE-2026-125114

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-125114

请登录查看更多情报信息。

Other References for CVE-2026-125114 (4)

https://github.com/novuhq/novu/pull/10457 x_refsource_MISC
https://github.com/novuhq/novu/releases/tag/v3.15.0 x_refsource_MISC
https://github.com/novuhq/novu/security/advisories/GHSA-4x48-cgf9-q33f x_refsource_CONFIRM
https://github.com/novuhq/novu/commit/87d965eb88340ac7cd262dd52c8015acd092dc68 x_refsource_MISC

https://www.cve.org/CVERecord?id=CVE-2026-125114

IV. Related Vulnerabilities

Same product: novu

Same vendor: novuhq

Same weakness: CWE-918