CVE-2026-45568— zrok Python ProxyShare can be used as an SSRF proxy through absolute URL paths
Quick assessment
Affected
openziti zrok
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
OpenZiti zrok是OpenZiti组织开源的一个安全的互联网共享工具。 OpenZiti zrok 2.0.3之前版本存在路径遍历漏洞，该漏洞源于Python SDK ProxyShare Flask代理路由在请求路径中接受绝对URL并传递给urllib.parse.urljoin，可能导致路径替换配置的目标主机并返回攻击者选择的URL响应。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-45568
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
zrok Python ProxyShare can be used as an SSRF proxy through absolute URL paths
Source: CVE Program / CVE List V5
Vulnerability Description
zrok is software for sharing web services, files, and network resources. Prior to 2.0.3, zrok's Python SDK ProxyShare Flask proxy route accepts an absolute URL in the request path and passes it to urllib.parse.urljoin, allowing the requested path to replace the configured target host and causing requests.request to return a server-side response from an attacker-chosen URL. This issue is fixed in version 2.0.3.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:L
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5
Vulnerability Title
OpenZiti zrok 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OpenZiti zrok是OpenZiti组织开源的一个安全的互联网共享工具。 OpenZiti zrok 2.0.3之前版本存在路径遍历漏洞，该漏洞源于Python SDK ProxyShare Flask代理路由在请求路径中接受绝对URL并传递给urllib.parse.urljoin，可能导致路径替换配置的目标主机并返回攻击者选择的URL响应。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-45568
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-45568
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-45568 (1)
Vendor Advisories for CVE-2026-45568 (1)
Vendor Pages for CVE-2026-45568 (1)
IV. Related Vulnerabilities
Same product: zrok
-
CVE-2026-45576
zrok copy writes attacker-controlled WebDAV paths outside th -
CVE-2026-42275
zrok: WebDAV drive backend follows symlinks outside DriveRoo -
CVE-2026-40304
zrok's broken ownership check in DELETE /api/v2/unaccess all -
CVE-2026-40303
zrok allows unauthenticated DoS via unbounded memory allocat -
CVE-2026-40302
zrok has reflected XSS in GitHub OAuth callback via unsaniti
Same vendor: openziti
-
CVE-2026-45576
zrok copy writes attacker-controlled WebDAV paths outside th -
CVE-2026-58165
OpenZiti - Privilege Escalation to Admin via Unauthorized En -
CVE-2026-42275
zrok: WebDAV drive backend follows symlinks outside DriveRoo -
CVE-2026-40304
zrok's broken ownership check in DELETE /api/v2/unaccess all -
CVE-2026-40303
zrok allows unauthenticated DoS via unbounded memory allocat
Same weakness: CWE-22
-
CVE-2026-94580
Brocade Fabric OS <10.0.1任意文件删除漏洞 -
CVE-2026-105820
Vault ACL Policy Cache Vulnerable to Cross-Namespace Policy -
CVE-2026-105816
Vault Vulnerable to Arbitrary Code Execution via Plugin Cata -
CVE-2026-106557
Backstage: Improper input validation in TechDocs Markdown ex -
CVE-2026-101886
Cisco Jabber for Android Path Traversal via Shared Content U
V. Comments for CVE-2026-45568
No comments yet