CVE-2026-108939

5.3Medium

Published 13 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash

5.3Medium

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None
Impact: Limited impact
Weakness: CWE-918

Impact

Remote unauthenticated attackers can trigger server-side request forgery (SSRF) to read internal network services. They only need network access to the mistral.rs server endpoint handling media sources.

Root cause

Flawed IP address validation in the is_global_ip function allows requests to bypass internal network restrictions.

Affected systems

EricLBuehler mistral.rs up to 0.9.3

CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Fix & remediation

Upgrade mistral.rs to version 0.9.4 or apply commit cfb8c6a0c42361dc4579a9110b54d339c255b9fd. If you cannot upgrade immediately, restrict outbound network access from the server or isolate it from internal endpoints.

shell

$ cargo update mistralrs-server-core

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function is_global_ip of the file mistralrs-server-core/src/media_source.rs. Such manipulation of the argument ip leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.9.4 is recommended to address this issue. The name of the patch is cfb8c6a0c42361dc4579a9110b54d339c255b9fd. The affected component should be upgraded.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-108939