CVE-2026-90769
HighCVSS 7.7Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
Open Notebook before 1.11.0 fails to validate the URL parameter in the POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network services, and localhost-bound services through the application server's direct HTTP requests.
Risk Assessment
SSRF can lead to leakage of sensitive data, including cloud metadata credentials, and interaction with internal services not exposed externally. The risk affects environments where Open Notebook has access to internal networks or cloud infrastructure.
Recommendation
Upgrade Open Notebook to version 1.11.0 or later. In the meantime, restrict the application server's network access to necessary resources and consider blocking requests to internal address ranges and cloud metadata endpoints.
Other vulnerabilities in Open Notebook
See all- CVE-2026-33588High
Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the application user to create or modify files on the docker container via path traversal.
- CVE-2026-28201High
Open Notebook version 1.8.1 has improper input validation and an overly permissive default CORS configuration, allowing a remote attacker to trick a legitimate user into altering or deleting arbitrary database entries via a specially crafted malicious URL.
- CVE-2026-33587Critical
Lack of user input sanitisation in Open Notebook v1.8.3 allows the application user to execute Python code (and subsequently OS commands) on the docker container via Server-Side Template Injection (SSTI) for user-created transformations.
Original NVD description (English source)
Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network services, and localhost-bound services through the application server's direct HTTP requests.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS