CVE-2026-65057
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
The Keep tool (commit 91c75e0) is vulnerable to server-side request forgery (SSRF) in the unprotected healthcheck endpoint. Unauthenticated attackers can send a crafted JSON with a malicious host parameter, forcing the backend to issue requests to internal services or cloud metadata endpoints.
Risk Assessment
An attacker can steal cloud credentials and perform internal network reconnaissance, potentially leading to privilege escalation and full infrastructure compromise.
Recommendation
Secure the healthcheck endpoint with authentication and validate the host parameter. Update Keep to a patched version.
Original NVD description (English source)
Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the backend issue arbitrary HTTP requests by supplying attacker-controlled host values to the unprotected healthcheck endpoint. Attackers can send a crafted JSON payload with a malicious host parameter to cause the backend to issue outbound requests to internal services or cloud metadata endpoints, enabling theft of cloud credentials and internal network reconnaissance.