{"id":"CVE-2026-66090","kind":"vulnerability","aliases":["CVE-2026-66090"],"related":[],"title":"openEQUELLA: XML item metadata parser reads local files and makes server requests","description":"In openEQUELLA before 2026.1, the XML parser used for item metadata does not disable external entity resolution. A user permitted to create items (CREATE_ITEM) can submit crafted XML to POST /api/item and cause the server to read arbitrary files accessible to the openEQUELLA service, or make requests to attacker-specified locations (SSRF), including cloud instance metadata services.","summary":"openEQUELLA before 2026.1 parses item metadata XML with external entity resolution enabled. A user allowed to create items can send crafted XML to POST /api/item and have the server read files the service can access or make requests to internal addresses, including cloud metadata endpoints.","severity":"high","cvss":7.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["cloud-hosted","java","openequella","package","self-hosted"],"not_affected_if":["fixed-version","no-create-item-users"],"how_to_check":"- Check the installed openEQUELLA version against `2026.1`; anything older is in scope.\n- Confirm whether any accounts hold the CREATE_ITEM permission on the instance.","fix":"- Upgrade openEQUELLA to `2026.1` or later.\n- Until upgraded, restrict CREATE_ITEM to trusted users and limit outbound requests from the openEQUELLA host to cloud metadata addresses.","status":"open","published_at":"2026-10-29T02:16:52+00:00","first_seen_at":"2026-10-29T02:36:48+00:00","triaged_at":"2026-10-29T02:38:01+00:00","updated_at":"2026-10-29T02:38:01+00:00","category":"package","confidence":0.7,"triage":{"at":"2026-10-29T02:38:01Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade openEQUELLA to `2026.1` or later.\n- Until upgraded, restrict CREATE_ITEM to trusted users and limit outbound requests from the openEQUELLA host to cloud metadata addresses.","reach":"network","title":"openEQUELLA: XML item metadata parser reads local files and makes server requests","impact":"high","summary":"openEQUELLA before 2026.1 parses item metadata XML with external entity resolution enabled. A user allowed to create items can send crafted XML to POST /api/item and have the server read files the service can access or make requests to internal addresses, including cloud metadata endpoints.","category":"package","nicknames":[],"who_cares":["openequella","self-hosted","java","cloud-hosted"],"confidence":0.7,"needs_auth":"yes","worst_case":"server reads local files and reaches cloud metadata credentials","analyst_note":"Confirm the affected version range and whether a patch or advisory page exists beyond the NVD entry.","how_to_check":"- Check the installed openEQUELLA version against `2026.1`; anything older is in scope.\n- Confirm whether any accounts hold the CREATE_ITEM permission on the instance.","needs_analyst":true,"not_affected_if":["fixed-version","no-create-item-users"],"who_is_affected":"Self-hosted openEQUELLA instances older than 2026.1 where users can create items, since the flaw is reached through the item creation API. Instances where only trusted administrators can create items have a smaller exposure, but the service account's file access and network reach still matter. unknown whether sources list specific deployment types beyond this.","user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000631,"input_tokens":3343,"output_tokens":594,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-66090':15A,18A '/api/item':52B,104C '2026.1':30B,76C 'access':62B,113C 'address':68B 'allow':42B 'arbitrari':111C 'attack':123C 'attacker-specifi':122C 'caus':106C 'cloud':20B,70B,128C 'cloud-host':19B 'craft':48B,100C 'creat':44B,94C,96C 'cve':13A,16A 'disabl':86C 'enabl':39B 'endpoint':72B 'entiti':37B,88C 'extern':36B,87C 'file':8A,58B,112C 'host':21B,27B 'includ':69B,127C 'instanc':129C 'intern':67B 'item':3A,32B,45B,82C,95C,97C 'java':22B 'local':7A 'locat':125C 'make':10A,64B,119C 'metadata':4A,33B,71B,83C,130C 'openequella':1A,23B,28B,74C,116C 'packag':24B 'pars':31B 'parser':5A,79C 'permit':92C 'post':51B,103C 'read':6A,57B,110C 'request':12A,65B,120C 'resolut':38B,89C 'self':26B 'self-host':25B 'send':47B 'server':11A,56B,108C 'servic':60B,117C,131C 'specifi':124C 'ssrf':126C 'submit':99C 'use':80C 'user':41B,91C 'xml':2A,34B,49B,78C,101C","nicknames":[],"mitigations":[],"who_affected":"Self-hosted openEQUELLA instances older than 2026.1 where users can create items, since the flaw is reached through the item creation API. Instances where only trusted administrators can create items have a smaller exposure, but the service account's file access and network reach still matter. unknown whether sources list specific deployment types beyond this.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"first_public_at":"2026-10-29T02:16:52+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"9c1820ae-fb77-4810-a8aa-ca46e7474d2f","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-66090","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66090","severity":null,"published_at":"2026-10-29T02:16:52+00:00","modified_at":"2026-10-29T02:16:52+00:00","first_seen_at":"2026-10-29T02:36:48+00:00","fetched_at":"2026-10-29T02:36:48+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}