Exploit for CVE-2026-71211

githubexploit · 2026-08-05

Description

This describes an exploit for the vulnerability with identifier 2026-71211.

Parameterpath · path

Pathmlflow/server/gateway_api.py

Gateway proxy forwards requests to an unvalidated api_base, enabling SSRF to arbitrary hosts via the caller-supplied path.

7.1

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:LOW

Availability:NONE

33%confidence this exploit runs

Based on 1 file(s) in the source

0.2%higher than 6.7% of all CVEs

Updated 2026-08-12

Modified:2026-08-05 20:26

Last Seen:2026-08-05 20:35

Reporter:Abdivasiyev2008

Last commit:2026-08-05

README3 lines

## https://sploitus.com/exploit?id=A7536AE7-CEA7-5D67-9BAD-E91136D65EDB
# CVE-2026-71211-exploit
CVE-2026-71211 exploit