KROKI · CVE-2026-129485 · Package
NO FIX YET · SEE WHAT TO DO
Kroki before 0.36.0 lets an unauthenticated attacker send a crafted BlockDiag diagram whose node icon or background attributes make the server issue requests. An attacker can use this to query internal services or cloud metadata and read local image files.
first public Nov 9, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Teams that run Kroki themselves and expose its diagram rendering endpoints, especially where the server can reach internal services or cloud metadata endpoints. Instances that are not reachable from untrusted networks, or that are running 0.36.0 or later, are not affected by this flaw.
Not affected if managed-hosting, version-0.36.0-or-later
Who cares cloud-metadata, kroki, self-hosted
kroki --version or the image tag in your deployment, and see whether it is below 0.36.0.POST /blockdiag/svg and sibling endpoints) are reachable from untrusted networks.0.36.0 or later.Kroki before 0.36.0 contains a server-side request forgery vulnerability in the BlockDiag family of engines that allows unauthenticated attackers to make server requests via node icon and background attributes. Attackers can send crafted diagrams to POST /blockdiag/svg or sibling endpoints to query internal services or cloud metadata and read local image files from the server.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.