CVE-2026-125367 · Other
NO FIX YET
Pico, a multi-user platform, has a server-side request forgery flaw in its feeds service through version 4.1.2. A signed-up user can make the server fetch arbitrary URLs, including loopback, private-network and cloud metadata endpoints, and read the responses.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Teams that self-host Pico and let users sign up can be exposed, because any registered user can trigger outbound fetches from the server. Installs with no open sign-up, or where the feeds service is not used, are less exposed. Sources do not state a fixed version; the linked patch page should be checked.
Not affected if auth-required
Who cares pico, self-hosted
No fix yet, per the sources.
Pico through 4.1.2 contains a server-side request forgery vulnerability in the feeds service that allows signed-up users to make the server fetch arbitrary URLs via the run SSH command. Attackers can upload a feeds digest post listing internal URLs and trigger immediate fetching through Fetcher.ParseURL to reach loopback, RFC1918, and cloud metadata endpoints.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.