CVE Catalog
CVE-2026-105048
MediumCVSS 4.0Exploitation Probability (EPSS)
Low risk0.19%
8th percentile - higher than 8% of all known CVEs
Summary
The Playground feature of Zilliz Attu before 3.0.0 allows SSRF (proxying of requests to private IP addresses).
Risk Assessment
An attacker can exploit this feature to access internal network resources, potentially leading to data exposure or further attacks.
Recommendation
Upgrade Zilliz Attu to version 3.0.0 or later. Additionally, configure firewalls and restrict access to private IP addresses.
Other vulnerabilities in Zilliz Attu
Original NVD description (English source)
The Playground feature of Zilliz Attu before 3.0.0 allows SSRF (proxying of requests to private IP addresses).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS