---
id: "CVE-2026-114362"
kind: "vulnerability"
aliases: ["CVE-2026-114362"]
title: "HarnessRouter: test endpoint lets remote users force server-side requests"
severity: "medium"
cvss: 6.5
epss: 0.00245
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ai-tooling", "harnessrouter", "llm-gateway", "self-hosted"]
not_affected_if: ["endpoint-not-reachable-remotely", "version-0.31.13-or-later"]
published_at: "2026-10-21T20:17:25+00:00"
first_seen_at: "2026-10-23T21:57:29+00:00"
updated_at: "2026-10-25T03:48:54+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114362", "first_seen_at": "2026-10-23T21:57:29+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-114362", "first_seen_at": "2026-10-24T13:15:54+00:00"}]
---

# HarnessRouter: test endpoint lets remote users force server-side requests

HarnessRouter up to 0.31.12 has a server-side request forgery flaw in the Targets Test Endpoint of gateway/app.py, where the base_url argument is not validated. A remote attacker can make the server send requests to hosts of their choosing, such as internal services.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed HarnessRouter version and confirm whether it is `0.31.12` or earlier.
- Check whether the Targets Test Endpoint in gateway/app.py is reachable from outside the network.

## Fix

- Upgrade HarnessRouter to `0.31.13` (patch commit 1c4b1fc1f89737dabd089ac1d1c174a57f764e28).

## Timeline

- 2026-10-23T21:57:29+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-114362
- 2026-10-24T13:15:54+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-114362

## From the sources

A flaw has been found in HarnessRouter up to 0.31.12. This impacts an unknown function of the file gateway/app.py of the component Targets Test Endpoint. Executing a manipulation of the argument base_url can lead to server-side request forgery. The attack may be performed from remote. Upgrading to version 0.31.13 will fix this issue. This patch is called 1c4b1fc1f89737dabd089ac1d1c174a57f764e28. It is suggested to upgrade the affected component.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_