Zylon PrivateGPT URI Artifact Loader uri_loader.py load_file_from_uri server-side request forgery
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: poc
- Automatable: yes
- Technical impact: partial
Summary
Zylon PrivateGPT, a private AI document-chat application, is affected by a server-side request forgery flaw in its URI file loader, which lets a remote attacker make the server send requests to arbitrary internal or external destinations. This could allow attackers to reach internal services, probe the network, or access resources the server should not expose.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function load_file_from_uri of the file private_gpt/server/ingest/uri_loader.py of the component URI Artifact Loader. Performing a manipulation of the argument Value results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Timeline
- CVE published
- First seen by cve.now
- CISA SSVC assessment
Exploitation: poc · Automatable: yes · Technical impact: partial
- Record last updated
Affected versions
- Zylon PrivateGPT
1.0.0, 1.0.1