CVE-2026-111321

MEDIUM 5.4

TaskingAI through 0.3.0 SSRF via OpenAPI servers[0].url in Actions

CVSS Score

5.4

EPSS Score

0.0%

EPSS Percentile

0th

TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send arbitrary HTTP requests by supplying an unvalidated OpenAPI servers[0].url in a user-defined action. Attackers holding a project API key or console admin login can create an action pointing to loopback, internal or cloud metadata addresses and run it via POST /actions/{action_id}/run to read back up to 64 KiB of responses.

CWE	CWE-918
Vendor	taskingai
Product	taskingai
Published	Oct 15, 2026

Stay Ahead of the Next One

Get instant alerts for taskingai taskingai

Be the first to know when new medium vulnerabilities affecting taskingai taskingai are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Affected Versions

TaskingAI / TaskingAI

0 ≤ 0.3.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

hackmd.io: https://hackmd.io/@hieuPenguinnn/taskingai-user-action-openapi-server-url-ssrf github.com: https://github.com/TaskingAI/TaskingAI/blob/v0.3.0/backend/app/services/tool/action/openapi_utils.py#L168-L169 github.com: https://github.com/TaskingAI/TaskingAI/blob/v0.3.0/backend/app/services/tool/action/openapi_call.py#L144 github.com: https://github.com/TaskingAI/TaskingAI vulncheck.com: https://www.vulncheck.com/advisories/taskingai-through-0.3.0-ssrf-via-openapi-servers-0-url-in-actions

Credits

hieuPenguinnn