CVE-2026-8725
HighSummary
A weakness has been identified in CoreWorxLab CAAL up to version 1.6.0, affecting an unknown function in the file src/caal/webhooks.py of the test-hass Endpoint component. This manipulation leads to server-side request forgery.
Risk Assessment
Remote exploitation of this vulnerability is possible, and a publicly available exploit could be used for attacks. The vendor's lack of response may increase the risk for organizations.
Recommendation
It is recommended to update to the latest version of CoreWorxLab CAAL and to monitor systems for unauthorized requests.
Original NVD description (English source)
A weakness has been identified in CoreWorxLab CAAL up to 1.6.0. The affected element is an unknown function of the file src/caal/webhooks.py of the component test-hass Endpoint. This manipulation causes server-side request forgery. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.