CVE-2026-111321
MediumCVSS 5.4Summary
TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send arbitrary HTTP requests by supplying an unvalidated OpenAPI servers[0].url in a user-defined action. Attackers holding a project API key or console admin login can create an action pointing to loopback, internal or cloud metadata addresses and run it via POST /actions/{action_id}/run to read back up to 64 KiB of responses.
Risk Assessment
An authenticated attacker can reach internal services and cloud metadata, leading to data leakage and potential privilege escalation. This can compromise the confidentiality of internal infrastructure.
Recommendation
Upgrade TaskingAI beyond 0.3.0 if available and validate and restrict OpenAPI servers[0].url to trusted domains. Implement egress traffic controls and limit API key permissions.
Other vulnerabilities in TaskingAI
See all- CVE-2026-51906Critical
In TaskingAI v0.3.0 in the DALL-E 3 image generation tool save_url_image function, a path traversal vulnerability allows attackers to write downloaded images to arbitrary locations on the server filesystem by manipulating the project_id parameter.
- CVE-2026-51907High
In TaskingAI v0.3.0 in the QR Code Generator plugin save_base64_image function, a path traversal vulnerability allows attackers to write image files to arbitrary locations on the server filesystem by manipulating the project_id parameter.
Original NVD description (English source)
TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send arbitrary HTTP requests by supplying an unvalidated OpenAPI servers[0].url in a user-defined action. Attackers holding a project API key or console admin login can create an action pointing to loopback, internal or cloud metadata addresses and run it via POST /actions/{action_id}/run to read back up to 64 KiB of responses.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS