CVE-2026-108939
MediumCVSS 5.3Summary
A vulnerability in EricLBuehler mistral.rs up to 0.9.3 affects the function is_global_ip in mistralrs-server-core/src/media_source.rs. Manipulation of the argument ip leads to server-side request forgery. The attack can be launched remotely. The exploit is public. Upgrading to 0.9.4 is recommended.
Risk Assessment
A remote attacker could make the server send requests to internal resources, potentially leading to information disclosure or attacks on internal services.
Recommendation
Upgrade to version 0.9.4.
Other vulnerabilities in Mistral.rs
See all- CVE-2026-108940Medium
A vulnerability in EricLBuehler Mistral.rs up to 0.9.3 affects the function calibration_apply in mistralrs-server-core/src/handlers.rs. Manipulation of the argument save_cimatrix results in path traversal. The attack can be initiated remotely. The exploit is public. Upgrading to 0.9.4 fixes the issue.
- CVE-2026-108759Medium
mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shell code to read and overwrite files outside the sandbox via symlinks. Attackers or prompt-injected agents can name symlinks as outputs or reuse sessions with symlinked input paths to access files with the server process's permissions.
- CVE-2026-75090Medium
A vulnerability was detected in EricLBuehler Mistral.rs up to 0.8.22, affecting the function convert_gguf_to_hf_tokenizer of the file mistralrs-core/src/gguf/gguf_tokenizer.rs in the GGUF Tokenizer component. Manipulation of the arguments eos_token_id/bos_token_id/unknown_token_id results in out-of-bounds read. The attack can be executed remotely and the exploit is now public. Upgrading to version 0.8.23 can resolve this issue.
Original NVD description (English source)
A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function is_global_ip of the file mistralrs-server-core/src/media_source.rs. Such manipulation of the argument ip leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.9.4 is recommended to address this issue. The name of the patch is cfb8c6a0c42361dc4579a9110b54d339c255b9fd. The affected component should be upgraded.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS