CVE-2026-15378
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
A flaw in the `guardrails-detectors` component allows a remote attacker to perform a blind SSRF attack by submitting a crafted XSD string. This can lead to unauthorized access to sensitive information, including credentials from cloud metadata services, Kubernetes API, internal MinIO, and other internal network endpoints. It also enables local file reads of critical data such as service account tokens and pod secrets.
Risk Assessment
The organization is at risk of leaking sensitive credentials and secrets, potentially leading to compromise of cloud resources and internal systems. The attack can be performed remotely without authentication, increasing the risk of privilege escalation and lateral movement within the internal network.
Recommendation
Immediately update the `guardrails-detectors` component to the latest patched version. Additionally, restrict access to internal network endpoints and implement input validation for XSD data.
Other vulnerabilities in guardrails-detectors
See all- CVE-2026-15143Critical
A flaw was found in the file_type content detector of guardrails-detectors, allowing a remote attacker to supply an arbitrary XSD string processed without restrictions. This can lead to server-side requests to arbitrary URLs or local file reads.
- CVE-2026-15154Medium
A ReDoS vulnerability was found in the `guardrails-detectors` component of Red Hat OpenShift AI. A remote attacker can send crafted regular expressions to the public detection API, causing catastrophic backtracking and 100% CPU usage by a worker process.
Original NVD description (English source)
A flaw was found in the `guardrails-detectors` component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery (SSRF) by submitting a specially crafted XML Schema Definition (XSD) string. This can lead to unauthorized access to sensitive information, including credentials from cloud metadata services, Kubernetes API, internal MinIO, and other internal network endpoints. Additionally, it enables local file reads of critical data such as service account tokens and pod secrets.