{"id":"CVE-2026-127083","kind":"vulnerability","aliases":["CVE-2026-127083"],"related":[],"title":"Huginn: authenticated users can reach internal services through agents","description":"Huginn from 2026.09.09 before 2026.11.09 contains a server-side request forgery vulnerability because OutboundProxy.configure! applies the egress proxy only to Faraday and Typhoeus. Authenticated users can configure JiraAgent or WeiboPublishAgent to send HTTParty, open-uri or Net::HTTP requests directly to internal services, with JiraAgent returning response data as events.","summary":"Huginn applies its outbound egress proxy only to some HTTP libraries, so a logged-in user can make JiraAgent or WeiboPublishAgent send requests straight to internal services. JiraAgent returns the response data as events, so the attacker can read what comes back.","severity":"medium","cvss":6.4,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"huginn","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["huginn","other","ruby","self-hosted"],"not_affected_if":["auth-required","no-jira-or-weibo-agents"],"how_to_check":"- Check the installed Huginn version against the affected range (`2026.09.09` before `2026.11.09`).\n- Look for the outbound proxy setting in your Huginn configuration and whether JiraAgent or WeiboPublishAgent are enabled for users.","fix":"- Huginn: move to `2026.11.09` or later (fixed version per the NVD description).","status":"open","published_at":"2026-11-13T10:18:04+00:00","first_seen_at":"2026-11-13T10:47:29+00:00","triaged_at":"2026-11-13T10:55:03+00:00","updated_at":"2026-11-13T10:55:03+00:00","category":"other","confidence":0.7,"triage":{"at":"2026-11-13T10:55:03Z","model":"claude-haiku-5-5","output":{"fix":"- Huginn: move to `2026.11.09` or later (fixed version per the NVD description).","reach":"internet","title":"Huginn: authenticated users can reach internal services through agents","impact":"medium","summary":"Huginn applies its outbound egress proxy only to some HTTP libraries, so a logged-in user can make JiraAgent or WeiboPublishAgent send requests straight to internal services. JiraAgent returns the response data as events, so the attacker can read what comes back.","audience":"businesses","category":"other","nicknames":[],"who_cares":["huginn","self-hosted","ruby"],"confidence":0.7,"fix_status":"available","needs_auth":"yes","worst_case":"internal services reachable and JiraAgent returns their responses","analyst_note":"Confirm the exact affected and fixed versions and the default agent configuration from the vendor advisory linked in the sources.","how_to_check":"- Check the installed Huginn version against the affected range (`2026.09.09` before `2026.11.09`).\n- Look for the outbound proxy setting in your Huginn configuration and whether JiraAgent or WeiboPublishAgent are enabled for users.","plain_action":"","product_name":"huginn","needs_analyst":true,"not_affected_if":["auth-required","no-jira-or-weibo-agents"],"who_is_affected":"Self-hosted Huginn instances in the affected range where users can create JiraAgent or WeiboPublishAgent agents. The egress proxy is bypassed for HTTParty, open-uri and Net::HTTP requests, so instances whose agents can reach internal networks are exposed. Instances where only trusted administrators have accounts, or where the network blocks internal access, carry less risk.","user_interaction":"no","product_ecosystem":"vendor","needs_special_setup":"yes","severity_if_unknown":"unknown"},"cost_usd":0.000787,"input_tokens":4661,"output_tokens":642,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-127083':12A,15A '-2026':11A,14A '2026.09.09':68C '2026.11.09':70C 'agent':9A 'appli':24B,81C 'attack':60B 'authent':2A,90C 'back':65B 'come':64B 'configur':93C 'contain':71C 'cve':10A,13A 'data':55B,115C 'direct':107C 'egress':27B,83C 'event':57B,117C 'faraday':87C 'forgeri':77C 'host':22B 'http':32B,105C 'httparti':99C 'huginn':1A,16A,17B,23B,66C 'intern':6A,49B,109C 'jiraag':42B,51B,94C,112C 'librari':33B 'log':37B 'logged-in':36B 'make':41B 'net':104C 'open':101C 'open-uri':100C 'outbound':26B 'outboundproxy.configure':80C 'proxi':28B,84C 'reach':5A 'read':62B 'request':46B,76C,106C 'respons':54B,114C 'return':52B,113C 'rubi':19B 'self':21B 'self-host':20B 'send':45B,98C 'server':74C 'server-sid':73C 'servic':7A,50B,110C 'side':75C 'straight':47B 'typhoeus':89C 'uri':102C 'user':3A,39B,91C 'vulner':78C 'weibopublishag':44B,96C","nicknames":[],"mitigations":[],"who_affected":"Self-hosted Huginn instances in the affected range where users can create JiraAgent or WeiboPublishAgent agents. The egress proxy is bypassed for HTTParty, open-uri and Net::HTTP requests, so instances whose agents can reach internal networks are exposed. Instances where only trusted administrators have accounts, or where the network blocks internal access, carry less risk.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["huginn"],"ptokens":["huginn"],"labels":["huginn","medium","other","ruby","selfhosted","vendor"],"campaign_type":null,"search_a":"'-127083':12A,15A '-2026':11A,14A 'agent':9A 'authent':2A 'cve':10A,13A 'huginn':1A,16A 'intern':6A 'reach':5A 'servic':7A 'user':3A","search_b":"'appli':24B 'attack':60B 'back':65B 'come':64B 'data':55B 'egress':27B 'event':57B 'host':22B 'http':32B 'huginn':17B,23B 'intern':49B 'jiraag':42B,51B 'librari':33B 'log':37B 'logged-in':36B 'make':41B 'outbound':26B 'proxi':28B 'read':62B 'request':46B 'respons':54B 'return':52B 'rubi':19B 'self':21B 'self-host':20B 'send':45B 'servic':50B 'straight':47B 'user':39B 'weibopublishag':44B","search_c":"'2026.09.09':68C '2026.11.09':70C 'appli':81C 'authent':90C 'configur':93C 'contain':71C 'data':115C 'direct':107C 'egress':83C 'event':117C 'faraday':87C 'forgeri':77C 'http':105C 'httparti':99C 'huginn':66C 'intern':109C 'jiraag':94C,112C 'net':104C 'open':101C 'open-uri':100C 'outboundproxy.configure':80C 'proxi':84C 'request':76C,106C 'respons':114C 'return':113C 'send':98C 'server':74C 'server-sid':73C 'servic':110C 'side':75C 'typhoeus':89C 'uri':102C 'user':91C 'vulner':78C 'weibopublishag':96C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T20:00:42+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-127083","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-127083","severity":null,"published_at":"2026-11-13T10:18:04+00:00","modified_at":"2026-11-13T10:18:04+00:00","first_seen_at":"2026-11-13T10:47:29+00:00","fetched_at":"2026-11-13T10:47:29+00:00","note":null}],"documents":[{"id":145290,"url":"https://github.com/huginn/huginn/commit/a6f5fb64ac957f33fc6cdff6ab92884e372857a8","title":"Patch: github.com","kind":"other","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Patch: github.com"},{"id":145287,"url":"https://github.com/huginn/huginn/releases/tag/v2026.11.09","title":"Release notes: github.com","kind":"release","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Release notes: github.com"},{"id":145292,"url":"https://github.com/huginn/huginn/security/advisories/GHSA-98rv-h5p4-9rgr","title":"Vendor advisory: github.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":"2026-11-10T20:00:42+00:00","relation":"advisory","confidence":null,"note":"Vendor advisory: github.com"},{"id":145293,"url":"https://www.vulncheck.com/advisories/huginn-from-2026.09.09-before-2026.11.09-ssrf-via-outbound-proxy-bypass","title":"Third-party advisory: www.vulncheck.com","kind":"advisory","source":"nvd","publisher":"research","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Third-party advisory: www.vulncheck.com"}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}