Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-76164— Authenticated Server-Side Request Forgery in AIL Framework Crawler Allows Access to Internal Network Resources

Quick assessment

Affected
ail-project ail-framework
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

ail project AIL Framework是ail project组织的一个信息分析框架。 ail project AIL Framework 7.0之前版本存在服务端请求伪造漏洞，该漏洞源于爬虫提交功能对目标主机验证不足，存在服务端请求伪造漏洞，低权限已认证用户可提交任意URL进行爬取，利用服务器作为网络跳板访问回环地址、私有网络、链路本地地址或云元数据服务等不应可达的地址，可能导致敏感内部数据泄露。

CVSS 7.1 · High EPSS 0.40% · P34

Affected Version Matrix 1

VendorProduct Version RangeStatus
ail-project ail-framework < 7.0 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-76164

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Authenticated Server-Side Request Forgery in AIL Framework Crawler Allows Access to Internal Network Resources
Source: CVE Program / CVE List V5
Vulnerability Description
AIL Framework contains a server-side request forgery (SSRF) vulnerability in its crawler submission functionality. A low-privileged authenticated user with access to the crawler interface can submit an arbitrary URL for crawling without adequate validation of the destination host. The crawler can therefore be instructed to make direct HTTP(S) requests to addresses that should not be reachable by application users, including loopback addresses, RFC1918 private networks, link-local addresses, and cloud metadata services such as 169.254.169.254. Manual crawler tasks bypass the existing domain blacklist because they are assigned a non-zero priority, and ordinary IP literals are classified as web targets and fetched directly rather than through Tor or another proxy. Consequently, an attacker can use the AIL server as a network pivot to access services available from the server's network context. Responses generated by these requests, including captured HTML, screenshots, and HAR data, can subsequently be accessed through the crawler interface. This makes the SSRF non-blind and may allow an attacker to disclose sensitive internal application data, service information, or cloud instance metadata and credentials. The patch introduces validation that resolves crawler destinations and rejects URLs resolving to non-global IP addresses, addressing localhost, private-network, and link-local targets.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5
Vulnerability Title
ail project AIL Framework 服务端请求伪造漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
ail project AIL Framework是ail project组织的一个信息分析框架。 ail project AIL Framework 7.0之前版本存在服务端请求伪造漏洞，该漏洞源于爬虫提交功能对目标主机验证不足，存在服务端请求伪造漏洞，低权限已认证用户可提交任意URL进行爬取，利用服务器作为网络跳板访问回环地址、私有网络、链路本地地址或云元数据服务等不应可达的地址，可能导致敏感内部数据泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
ail-project ail-framework 0 ~ 7.0 -

II. Public POCs for CVE-2026-76164

# POC Description Source Link Shenlong Link
AI-Generated POC Premium
Qwen3.6-35B-A3B · 6817 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month

III. Intelligence Information for CVE-2026-76164

请登录查看更多情报信息。

IV. Related Vulnerabilities

Same product: ail-framework
Same vendor: ail-project
Same weakness: CWE-918