CVE-2026-73058
MediumCVSS 5.8Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
stoatchat versions before 0.15.0 fail to block the IPv6 unspecified address (::) in the SSRF blocklist, allowing unauthenticated attackers to bypass protections via the /proxy and /embed endpoints. Attackers can craft requests using IPv6 literal syntax to access services on the loopback interface and retrieve sensitive internal content.
Risk Assessment
The risk includes unauthorized access to internal services and data, potentially leading to disclosure of sensitive information or further attacks on the infrastructure. The vulnerability can be exploited remotely without authentication.
Recommendation
It is recommended to upgrade stoatchat to version 0.15.0 or later, which includes a fix to block the :: address. Also review the SSRF blocklist configuration to ensure it covers all IPv6 address variants.
Original NVD description (English source)
stoatchat versions before 0.15.0 fail to block the IPv6 unspecified address (::) in the SSRF blocklist, allowing unauthenticated attackers to bypass protections via the /proxy and /embed endpoints. Attackers can craft requests using IPv6 literal syntax to access services on the loopback interface and retrieve sensitive internal content.