CVE-2026-111323

MEDIUM 5.3

RedAmon through 7.0.1 Unauthenticated SSRF via /tradecraft/verify Endpoint

CVSS Score

5.3

EPSS Score

0.0%

EPSS Percentile

0th

RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST /tradecraft/verify endpoint because validate_url checks only the initial hostname. Attackers can submit a public URL that redirects or DNS-rebinds to internal addresses like cloud metadata services, receiving fetched content through the model-generated summary.

CWE	CWE-918
Vendor	samugit83
Product	redamon
Published	Oct 15, 2026

Stay Ahead of the Next One

Get instant alerts for samugit83 redamon

Be the first to know when new medium vulnerabilities affecting samugit83 redamon are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Affected Versions

samugit83 / RedAmon

0 ≤ 7.0.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

hackmd.io: https://hackmd.io/@hieuPenguinnn/redamon-tradecraft-verify-unauth-ssrf github.com: https://github.com/samugit83/redamon/blob/e1dfdff671b7e76d3a002eeba37b01d92cb949e1/agentic/orchestrator_helpers/tradecraft_lookup.py#L231 github.com: https://github.com/samugit83/redamon/blob/e1dfdff671b7e76d3a002eeba37b01d92cb949e1/agentic/orchestrator_helpers/tradecraft_lookup.py#L539 github.com: https://github.com/samugit83/redamon/blob/e1dfdff671b7e76d3a002eeba37b01d92cb949e1/agentic/api.py#L1688 github.com: https://github.com/samugit83/redamon vulncheck.com: https://www.vulncheck.com/advisories/redamon-through-7.0.1-unauthenticated-ssrf-via-tradecraft-verify-endpoint

Credits

hieuPenguinnn