CVE-2026-70620

MEDIUM 6.8

Odysseus SSRF via Embedding Endpoint Configuration

CVSS Score

6.8

EPSS Score

0.0%

EPSS Percentile

0th

Odysseus before commit 87babb5 contains a server-side request forgery vulnerability that allows admin-privileged attackers to direct the server to probe internal network resources by supplying arbitrary URLs to the embedding endpoint configuration without scheme, host, IP range, or DNS rebind validation. Attackers can submit loopback addresses, RFC 1918 ranges, or link-local addresses through the embedding endpoint API to partially read responses from cloud instance metadata services, internal APIs, and other hosts reachable from the server.

CWE	CWE-918
Vendor	odysseus-dev
Product	odysseus
Published	Aug 4, 2026
Last Updated	Aug 4, 2026

Stay Ahead of the Next One

Get instant alerts for odysseus-dev odysseus

Be the first to know when new medium vulnerabilities affecting odysseus-dev odysseus are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

None

Affected Versions

odysseus-dev / odysseus

0 < 87babb58d57897089b133b313e2ab6d09e7ef54e

References

NVD ↗ CVE.org ↗ EPSS Data ↗

aydinnyunus.github.io: https://aydinnyunus.github.io/2026/06/16/odysseus-embedding-endpoint-takeover/ github.com: https://github.com/odysseus-dev/odysseus/issues/132 github.com: https://github.com/odysseus-dev/odysseus/pull/1206 github.com: https://github.com/odysseus-dev/odysseus/commit/87babb58d57897089b133b313e2ab6d09e7ef54e vulncheck.com: https://www.vulncheck.com/advisories/odysseus-ssrf-via-embedding-endpoint-configuration

Credits

Yunus AYDIN