TensorZero Gateway SSRF and Arbitrary File Read (GHSA-824w-x939-6cmc, CVE-2026-54457)

Vulnerability Overview Vulnerability Name: Arbitrary file read and SSRF in TensorZero Gateway's internal object storage endpoint Vulnerability ID: GHSA-824w-x939-6cmc Publish Date: June 5, 2026 Severity: High (7.7 / 10) Impact Scope Affected Versions: - (pip): <2026.6.0 - (DockerHub): <2026.6.0 Vulnerability Description: - The endpoint accepts a user-supplied JSON parameter, dynamically overriding the configuration. - By abusing the storage type, an attacker can read arbitrary files on the gateway’s file system, including files that may contain sensitive credentials. - By abusing the storage type, an attacker can force the gateway to initiate outbound storage requests to attacker-chosen internal or external metadata endpoints. - The vulnerability is only applicable if the gateway is accessible to unauthenticated callers. If the TensorZero deployment has authentication enabled, only authenticated callers can exploit this vulnerability. If authentication is not enabled on the deployment, any caller can exploit this vulnerability. Remediation Fixed Version: 2026.6.0 Reference Link: PR #7527 Temporary Workaround: - If upgrading to 2026.6.0 is not possible, block external access to the endpoint. Additional Information CVSS v3 Base Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: Low - User Interaction: None - Scope: Changed - Confidentiality: High - Integrity: None - Availability: None CVE ID: CVE-2026-54457 Weaknesses: - CWE-552 - CWE-918 Contributors: geo-chen

Goal Reached Thanks to every supporter — we hit 100%!

TensorZero Gateway SSRF and Arbitrary File Read (GHSA-824w-x939-6cmc, CVE-2026-54457)

More from this source