CVE-2026-15143
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
A flaw was found in the file_type content detector of guardrails-detectors, allowing a remote attacker to supply an arbitrary XSD string processed without restrictions. This can lead to server-side requests to arbitrary URLs or local file reads.
Risk Assessment
The risk includes potential disclosure of sensitive information such as cloud provider credentials and access to internal network services, which could lead to further compromise of the organization's infrastructure.
Recommendation
Immediately update the guardrails-detectors library to the latest version containing a fix that restricts XSD processing. If an update is not possible, block access to the file_type function for untrusted input.
Other vulnerabilities in guardrails-detectors
See all- CVE-2026-15378Critical
A flaw in the `guardrails-detectors` component allows a remote attacker to perform a blind SSRF attack by submitting a crafted XSD string. This can lead to unauthorized access to sensitive information, including credentials from cloud metadata services, Kubernetes API, internal MinIO, and other internal network endpoints. It also enables local file reads of critical data such as service account tokens and pod secrets.
- CVE-2026-15154Medium
A ReDoS vulnerability was found in the `guardrails-detectors` component of Red Hat OpenShift AI. A remote attacker can send crafted regular expressions to the public detection API, causing catastrophic backtracking and 100% CPU usage by a worker process.
Original NVD description (English source)
A flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition (XSD) string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file reads, potentially resulting in sensitive information disclosure, such as cloud provider credentials or access to internal network services.