CVE-2026-59765

23th percentile - higher than 23% of all known CVEs

SSRF vulnerability in migration asset downloads bypasses hostmatcher, allowing reading internal files and cloud metadata.

An attacker can access internal network resources, including cloud metadata, potentially leading to sensitive data leakage and privilege escalation.

Update the software to a patched version and restrict access to internal network resources.