CVE-2026-66704

HighCVSS 7.2

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

9th percentile - higher than 9% of all known CVEs

Summary

The Gutenverse Companion plugin version 2.5.1 and earlier contains an unauthenticated Server Side Request Forgery (SSRF) vulnerability. This vulnerability allows an attacker without authentication to send requests from the server to internal resources.

Risk Assessment

The risk includes the ability to scan the internal network, access internal services, or use the server as a proxy for attacks on other systems. This could lead to data leakage or further compromise of the infrastructure.

Recommendation

It is recommended to immediately update the Gutenverse Companion plugin to a version newer than 2.5.1. Also, monitor server logs for suspicious outbound requests.

Original NVD description (English source)

Unauthenticated Server Side Request Forgery (SSRF) in Gutenverse Companion <= 2.5.1 versions.