PatchSiren cyber security CVE debrief
CVE-2026-9372 ItzCrazyKns CVE debrief
A server-side request forgery (SSRF) vulnerability exists in ItzCrazyKns Vane up to version 1.12.1, specifically within the Model Provider API component located at src/app/api/providers/route.ts. The vulnerability stems from improper validation of the baseURL argument, allowing remote attackers to manipulate this parameter to induce unauthorized server-side requests. The issue was reported to the project maintainers via GitHub issue prior to public disclosure, but no response has been received as of the CVE publication date. The vulnerability has a published exploit, increasing the risk of active exploitation. The CVSS 4.0 vector indicates network attack vector with low attack complexity, no privileges required, and low impacts across confidentiality, integrity, and availability dimensions. The weakness is classified as CWE-918 (Server-Side Request Forgery).
- Vendor
- ItzCrazyKns
- Product
- Vane
- CVSS
- MEDIUM 5.5
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-05-24
- Original CVE updated
- 2026-05-26
- Advisory published
- 2026-05-24
- Advisory updated
- 2026-05-26
Who should care
Organizations running ItzCrazyKns Vane versions up to 1.12.1, particularly those exposing the Model Provider API to untrusted networks. Security teams responsible for AI/ML infrastructure and application security engineers managing self-hosted language model frontends.
Technical summary
The vulnerability resides in the route.ts file handling Model Provider API requests. Insufficient validation of the baseURL parameter enables attackers to supply arbitrary URLs, causing the server to issue requests to unintended destinations. This can facilitate internal network reconnaissance, access to cloud metadata services, or interaction with internal APIs. The attack requires no authentication and can be executed remotely with low complexity.
Defensive priority
medium
Recommended defensive actions
- Review and restrict outbound network connectivity from Vane application servers to limit SSRF blast radius
- Implement strict allowlist validation for baseURL parameter in src/app/api/providers/route.ts, permitting only trusted model provider endpoints
- Deploy input sanitization to reject URLs containing private IP ranges, localhost references, and internal DNS names
- Monitor application logs for anomalous outbound requests originating from the Model Provider API component
- Consider network segmentation to isolate Vane instances from sensitive internal infrastructure
- Await official patch from ItzCrazyKns/Vane project; monitor GitHub issue 1124 for maintainer response
Evidence notes
Vulnerability confirmed through Vuldb submission 813211 and assigned CVE-2026-9372. GitHub issue 1124 documents pre-disclosure contact attempt. NVD status marked as Deferred as of 2026-05-26. CVSS 4.0 vector provided by Vuldb. No CISA KEV listing present.
Official resources
2026-05-24