CVE-2026-73058
6.9
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N
Summary
stoatchat versions before 0.15.0 fail to block the IPv6 unspecified address (::) in the SSRF blocklist, allowing unauthenticated attackers to bypass protections via the /proxy and /embed endpoints. Attackers can craft requests using IPv6 literal syntax to access services on the loopback interface and retrieve sensitive internal content.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| stoatchat | stoatchat | 0 < 0.15.0 | affected |
| stoatchat | stoatchat | 0.15.0 | unaffected |
Weaknesses
- CWE-918: Server-Side Request Forgery (SSRF)
References
- https://github.com/stoatchat/stoatchat/security/advisories/GHSA-4rmr-77qv-hq47
- https://www.vulncheck.com/advisories/stoatchat-before-ssrf-via-ipv6-unspecified-address-bypass
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.