Live › vulnerability › CVE-2026-116000
Go to dashboardZylon PrivateGPT 1.0.0 and 1.0.1 have a server-side request forgery flaw in the load_file_from_uri function, which fetches files from URLs supplied in ingest requests. A remote attacker can make the server send requests to URLs of their choice, such as internal services, which can expose internal data.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-25 04:02 UTC. All times on this page are UTC.
Deployments running Zylon PrivateGPT 1.0.0 or 1.0.1 with the URI ingest path reachable by users who can send requests. Teams on other versions or without the URI loader exposed can likely skip it, but the sources do not confirm which versions are fixed.
No product ranges from the sources yet.
1.0.0 or 1.0.1Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function load_file_from_uri of the file private_gpt/server/ingest/uri_loader.py of the component URI Artifact Loader. Performing a manipulation of the argument Value results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
This page as .md · .json · in your agent: get_signal("CVE-2026-116000")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.