CVE-2026-85699
jina-ai reader server-side request forgery via redirect validation bypass
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
jina-ai reader contains a server-side request forgery vulnerability where URL validation is performed only on the initial request but not re-applied to subsequent redirect hops. Attackers can craft a public URL that redirects to internal network addresses or cloud metadata endpoints, allowing the server to fetch and return the target's response body to the attacker.
| CWE | CWE-918 |
| Vendor | jina-ai |
| Product | reader |
| Published | Sep 4, 2026 |
| Last Updated | Sep 8, 2026 |
Stay Ahead of the Next One
Get instant alerts for jina-ai reader
Be the first to know when new high vulnerabilities affecting jina-ai reader are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
jina-ai / reader
0 ≤ 1574bfd380d249c86c82db4dace0d9c8fe17e2b1
References
github.com: https://github.com/jina-ai/reader/issues/1252 github.com: https://github.com/jina-ai/reader github.com: https://github.com/jina-ai/reader/blob/1574bfd380d249c86c82db4dace0d9c8fe17e2b1/src/services/curl.ts github.com: https://github.com/jina-ai/reader/blob/1574bfd380d249c86c82db4dace0d9c8fe17e2b1/src/services/puppeteer.ts vulncheck.com: https://www.vulncheck.com/advisories/jina-ai-reader-server-side-request-forgery-via-redirect-validation-bypass
Credits
George Chen