PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-110719 Portkey-AI CVE debrief

CVE-2026-110719 is a server-side request forgery vulnerability in Portkey AI Gateway versions 1.14.0 through 1.15.2. The vulnerability allows unauthenticated attackers to reach loopback and Docker host services due to the isValidCustomHost function trusting localhost-style hosts when TRUSTED_CUSTOM_HOSTS is unset. Attackers can exploit this by sending crafted /v1 requests with an x-portkey-custom-host header.

Vendor
Portkey-AI
Product
gateway
CVSS
MEDIUM 6.9
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-14
Original CVE updated
2026-10-14
Advisory published
2026-10-14
Advisory updated
2026-10-14

Who should care

Defenders responsible for Portkey AI Gateway deployments, particularly those using versions 1.14.0 through 1.15.2, should assess exposure and prioritize verification and remediation efforts.

Why it matters

CVE-2026-110719 is a server-side request forgery vulnerability in Portkey AI Gateway versions 1.14.0 through 1.15.2. Defenders should prioritize verifying affected versions, assessing exposure to internal services, and implementing additional security measures to restrict access.

  • Potential unauthorized access to internal services.
  • Possible data leakage from internal services.
  • Risk of lateral movement within the network.
  • Need for verification of affected versions and exposure.

Technical summary

The vulnerability is caused by the isValidCustomHost function trusting localhost-style hosts when TRUSTED_CUSTOM_HOSTS is unset. This allows unauthenticated attackers to send crafted /v1 requests with an x-portkey-custom-host header to make the gateway call internal services and return their responses. The affected product deployments should be verified, and defenders should assess exposure to internal services and implement additional security measures to restrict access. The vulnerability has a CVSS score of 6.9 and a severity of MEDIUM.

Defensive priority

Defenders should prioritize verifying the affected versions of Portkey AI Gateway in their environment and assessing exposure to internal services.

Recommended defensive actions

  • Verify the version of Portkey AI Gateway in use and check if it falls within the affected range.
  • Assess the exposure of internal services to the vulnerable gateway.
  • Implement additional security measures to restrict access to the gateway and internal services.
  • Monitor for potential exploitation attempts.
  • Review compensating controls for exposed systems while remediation is scheduled and verified.
  • Check relevant monitoring, detection, and logs for exposed assets that need extra review.
  • Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE record and source item provide details on the vulnerability, including affected versions and potential exploitation vectors. The vulnerability allows unauthenticated attackers to reach loopback and Docker host services due to the isValidCustomHost function trusting localhost-style hosts when TRUSTED_CUSTOM_HOSTS is unset. Evidence is limited to public CVE details and source item descriptions. Defenders should verify affected versions, assess exposure to internal services, and implement additional security measures to restrict

Sources and references

Verified primary and authoritative sources

  • CVE-2026-110719 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-110719

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-110719 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-110719

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Portkey AI Gateway 1.14.0 through 1.15.2 SSRF via x-portkey-custom-host Header

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/110xxx/CVE-2026-110719.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/BJypv-aiMg

    Supplemental source - technical-description, exploit

  • Source reference

    Unverified legacy reference

    URL: https://github.com/Portkey-AI/gateway/blob/ca7712947ec8c0887803990b746740d36011c697/src/middlewares/requestValidator/index.ts

    Supplemental source - technical-description

  • Source reference

    Unverified legacy reference

    URL: https://github.com/Portkey-AI/gateway

    Supplemental source - product

  • Source reference

    Unverified legacy reference

    URL: https://www.vulncheck.com/advisories/portkey-ai-gateway-1.14.0-through-1.15.2-ssrf-via-x-portkey-custom-host-header

    Supplemental source - third-party-advisory

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.