PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-116000 Zylon CVE debrief

A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function load_file_from_uri of the file private_gpt/server/ingest/uri_loader.py of the component URI Artifact Loader. Performing a manipulation of the argument Value results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Vendor
Zylon
Product
PrivateGPT
CVSS
MEDIUM 6.9
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-25
Original CVE updated
2026-10-26
Advisory published
2026-10-25
Advisory updated
2026-10-26

Who should care

Defenders responsible for Zylon PrivateGPT deployments, operators, platform administrators, vulnerability management teams, and security teams should assess exposure and prioritize verification and remediation. They should verify the vulnerability in their inventory, apply patches or mitigations as soon as possible, and monitor for potential attacks to prevent server-side request forgery.

Why it matters

Defenders should prioritize verifying the vulnerability in their inventory and applying patches or mitigations as soon as possible to prevent server-side request forgery attacks.

  • Verify vulnerability in inventory
  • Apply patches or mitigations as soon as possible
  • Monitor for potential attacks to prevent server-side request forgery

Technical summary

The vulnerability affects the function load_file_from_uri of the file private_gpt/server/ingest/uri_loader.py of the component URI Artifact Loader in Zylon PrivateGPT 1.0.0/1.0.1. Performing a manipulation of the argument Value results in server-side request forgery. This vulnerability can be exploited remotely, and the exploit has been released to the public. Defenders should prioritize verifying the vulnerability in their inventory and applying patches or mitigations as soon as possible to prevent server-side request forgery attacks.

Defensive priority

Defenders should prioritize verifying the vulnerability in their inventory and applying patches or mitigations as soon as possible.

Recommended defensive actions

  • Verify the vulnerability in your inventory
  • Apply patches or mitigations as soon as possible
  • Monitor for potential attacks
  • Review compensating controls for exposed systems
  • Check relevant monitoring, detection, and logs for exposed assets
  • Track exceptions, retest remediated assets, and close the item only after evidence is documented
  • Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and source item provide details about the vulnerability, including its description, affected versions, and references. The vulnerability affects Zylon PrivateGPT 1.0.0/1.0.1, specifically the function load_file_from_uri of the file private_gpt/server/ingest/uri_loader.py. Defenders should verify the vulnerability in their inventory and apply patches or mitigations as soon as possible. Limited source detail is provided, so explicit evidence-limit language and defensive verification tasks are necessary.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-116000 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-116000

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-116000 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-116000

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Zylon PrivateGPT URI Artifact Loader uri_loader.py load_file_from_uri server-side request forger

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116000.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/vuln/426100

    Supplemental source - vdb-entry, technical-description

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/vuln/426100/cti

    Supplemental source - signature, permissions-required

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/cve/CVE-2026-116000

    Supplemental source - third-party-advisory

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/submit/992813

    Supplemental source - third-party-advisory

  • Source reference

    Unverified legacy reference

    URL: https://github.com/zylon-ai/private-gpt/security/advisories/GHSA-8294-hj7x-42g2

    Supplemental source - broken-link

  • Source reference

    Unverified legacy reference

    URL: https://github.com/zylon-ai/private-gpt/issues/2269

    Supplemental source - exploit, issue-tracking

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.