---
id: "CVE-2026-66090"
kind: "vulnerability"
aliases: ["CVE-2026-66090"]
title: "openEQUELLA: XML item metadata parser reads local files and makes server requests"
severity: "high"
cvss: 7.1
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["cloud-hosted", "java", "openequella", "package", "self-hosted"]
not_affected_if: ["fixed-version", "no-create-item-users"]
published_at: "2026-10-29T02:16:52+00:00"
first_seen_at: "2026-10-29T02:36:48+00:00"
updated_at: "2026-10-29T02:38:01+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66090", "first_seen_at": "2026-10-29T02:36:48+00:00"}]
---

# openEQUELLA: XML item metadata parser reads local files and makes server requests

openEQUELLA before 2026.1 parses item metadata XML with external entity resolution enabled. A user allowed to create items can send crafted XML to POST /api/item and have the server read files the service can access or make requests to internal addresses, including cloud metadata endpoints.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed openEQUELLA version against `2026.1`; anything older is in scope.
- Confirm whether any accounts hold the CREATE_ITEM permission on the instance.

## Fix

- Upgrade openEQUELLA to `2026.1` or later.
- Until upgraded, restrict CREATE_ITEM to trusted users and limit outbound requests from the openEQUELLA host to cloud metadata addresses.

## Timeline

- 2026-10-29T02:36:48+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-66090

## From the sources

In openEQUELLA before 2026.1, the XML parser used for item metadata does not disable external entity resolution. A user permitted to create items (CREATE_ITEM) can submit crafted XML to POST /api/item and cause the server to read arbitrary files accessible to the openEQUELLA service, or make requests to attacker-specified locations (SSRF), including cloud instance metadata services.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_