ValueCell-ai CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM ValueCell-ai CVE published 2026-10-15

CVE-2026-111320

CVE-2026-111320 is a medium-severity vulnerability in ValueCell through version 0.1.20, allowing unauthenticated server-side request forgery (SSRF) via the /api/v1/models/check endpoint. This vulnerability enables remote attackers to direct backend requests by manipulating the unvalidated provider base_url. Attackers can set base_url via the provider config endpoint and trigger a POST request to /api/v1/m [truncated]