{"id":"CVE-2026-119712","kind":"vulnerability","aliases":["CVE-2026-119712"],"related":[],"title":"PipesHub: indexing service fetches internal URLs embedded in documents","description":"PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser._fetch_single_url that allows attackers to make the indexing service fetch internal addresses by embedding image URLs in documents. Attackers can supply Markdown or HTML via uploads, synced mailboxes, or web connectors to reach loopback, private-network, or cloud metadata endpoints, with image responses embedded into indexed content.","summary":"PipesHub before 0.10.0 has a server-side request forgery flaw in its image parser, which fetches any image URL embedded in an uploaded document, synced mailbox, or web connector page. An attacker can make the indexing service reach loopback, private-network, or cloud metadata endpoints and get the responses embedded into indexed content.","severity":"medium","cvss":6.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-indexing","ai-tooling","cloud-metadata","pipeshub","self-hosted"],"not_affected_if":["no-internal-network-reach","version-0.10.0-or-later"],"how_to_check":"- Check the installed PipesHub version; it is affected before `0.10.0`.\n- Look for the `ImageParser._fetch_single_url` code path in the deployed indexing service.\n- Confirm whether the indexing service can reach internal addresses such as loopback, private ranges, or cloud metadata endpoints.","fix":"- PipesHub: move to `0.10.0` or later.","status":"open","published_at":"2026-10-30T16:17:54+00:00","first_seen_at":"2026-10-30T16:31:26+00:00","triaged_at":"2026-10-30T16:32:21+00:00","updated_at":"2026-10-30T16:32:21+00:00","category":"ai-tooling","confidence":0.7,"triage":{"at":"2026-10-30T16:32:21Z","model":"claude-haiku-5-5","output":{"fix":"- PipesHub: move to `0.10.0` or later.","reach":"network","title":"PipesHub: indexing service fetches internal URLs embedded in documents","impact":"medium","summary":"PipesHub before 0.10.0 has a server-side request forgery flaw in its image parser, which fetches any image URL embedded in an uploaded document, synced mailbox, or web connector page. An attacker can make the indexing service reach loopback, private-network, or cloud metadata endpoints and get the responses embedded into indexed content.","audience":"businesses","category":"ai-tooling","nicknames":[],"who_cares":["pipeshub","self-hosted","cloud-metadata","ai-indexing"],"confidence":0.7,"fix_status":"available","needs_auth":"unknown","worst_case":"internal services and cloud metadata readable through indexed content","analyst_note":"Confirm whether an attacker needs an account to upload or connect sources, and whether the fix in 0.10.0 is documented on the NVD entry or the project's release notes.","how_to_check":"- Check the installed PipesHub version; it is affected before `0.10.0`.\n- Look for the `ImageParser._fetch_single_url` code path in the deployed indexing service.\n- Confirm whether the indexing service can reach internal addresses such as loopback, private ranges, or cloud metadata endpoints.","plain_action":"","needs_analyst":true,"not_affected_if":["version-0.10.0-or-later","no-internal-network-reach"],"who_is_affected":"Teams running PipesHub's indexing service that ingest uploads, synced mailboxes, or web connector content. The risk comes from the indexing service fetching image URLs found in documents, so it can reach hosts the attacker should not see. Deployments already on `0.10.0` or later are not affected.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000748,"input_tokens":4176,"output_tokens":660,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-119712':12A,15A '-2026':11A,14A '0.10.0':31B,86C 'address':107C 'ai':17B,20B 'ai-index':16B 'ai-tool':19B 'allow':98C 'attack':61B,99C,114C 'cloud':23B,73B,134C 'cloud-metadata':22B 'connector':58B,126C 'contain':87C 'content':83B,143C 'cve':10A,13A 'document':9A,53B,113C 'embed':7A,49B,80B,109C,140C 'endpoint':75B,136C 'fetch':4A,45B,105C 'flaw':39B 'forgeri':38B,93C 'get':77B 'host':28B 'html':119C 'imag':42B,47B,110C,138C 'imageparser._fetch_single_url':96C 'index':2A,18B,65B,82B,103C,142C 'intern':5A,106C 'loopback':68B,129C 'mailbox':55B,123C 'make':63B,101C 'markdown':117C 'metadata':24B,74B,135C 'network':71B,132C 'page':59B 'parser':43B 'pipeshub':1A,25B,29B,84C 'privat':70B,131C 'private-network':69B,130C 'reach':67B,128C 'request':37B,92C 'respons':79B,139C 'self':27B 'self-host':26B 'server':35B,90C 'server-sid':34B,89C 'servic':3A,66B,104C 'side':36B,91C 'suppli':116C 'sync':54B,122C 'tool':21B 'upload':52B,121C 'url':6A,48B,111C 'via':120C 'vulner':94C 'web':57B,125C","nicknames":[],"mitigations":[],"who_affected":"Teams running PipesHub's indexing service that ingest uploads, synced mailboxes, or web connector content. The risk comes from the indexing service fetching image URLs found in documents, so it can reach hosts the attacker should not see. Deployments already on `0.10.0` or later are not affected.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T16:17:54+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119712","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119712","severity":null,"published_at":"2026-10-30T16:17:54+00:00","modified_at":"2026-10-30T16:17:54+00:00","first_seen_at":"2026-10-30T16:31:26+00:00","fetched_at":"2026-10-30T16:31:26+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}