CVE-2026-76164
Authenticated Server-Side Request Forgery in AIL Framework Crawler Allows Access to Internal Network Resources
Description
AIL Framework contains a server-side request forgery (SSRF) vulnerability in its crawler submission functionality. A low-privileged authenticated user with access to the crawler interface can submit an arbitrary URL for crawling without adequate validation of the destination host. The crawler can therefore be instructed to make direct HTTP(S) requests to addresses that should not be reachable by application users, including loopback addresses, RFC1918 private networks, link-local addresses, and cloud metadata services such as 169.254.169.254. Manual crawler tasks bypass the existing domain blacklist because they are assigned a non-zero priority, and ordinary IP literals are classified as web targets and fetched directly rather than through Tor or another proxy. Consequently, an attacker can use the AIL server as a network pivot to access services available from the server's network context. Responses generated by these requests, including captured HTML, screenshots, and HAR data, can subsequently be accessed through the crawler interface. This makes the SSRF non-blind and may allow an attacker to disclose sensitive internal application data, service information, or cloud instance metadata and credentials. The patch introduces validation that resolves crawler destinations and rejects URLs resolving to non-global IP addresses, addressing localhost, private-network, and link-local targets.
INFO
Published Date :
Aug. 19, 2026, 9:17 a.m.
Last Modified :
Oct. 22, 2026, 4:09 p.m.
Remotely Exploit :
Yes !
Source :
5a6e4751-2f3f-4070-9419-94fb35b644e8
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | |||||
| CVSS 4.0 | HIGH | 5a6e4751-2f3f-4070-9419-94fb35b644e8 | ||||
| CVSS 4.0 | HIGH | 5a6e4751-2f3f-4070-9419-94fb35b644e8 |
Solution
- Validate crawler destinations against a list of non-global IP addresses.
- Reject URLs resolving to localhost, private, or link-local targets.
- Apply the provided patch to the AIL framework.
- Update crawler submission validation logic.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-76164.
| URL | Resource |
|---|---|
| https://github.com/ail-project/ail-framework/commit/d7b60ff9e20ee493895430b1a7c63d498a8fd780 |
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-76164 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-76164
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-76164 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-76164 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Translated by [email protected]
Oct. 22, 2026
Action Type Old Value New Value Added Translation Title: AIL Framework, Description: AIL Framework contiene una vulnerabilidad de falsificación de petición del lado del servidor (SSRF) en su funcionalidad de envío del rastreador. Un usuario autenticado con bajos privilegios con acceso a la interfaz del rastreador puede enviar una URL arbitraria para rastrear sin una validación adecuada del host de destino. Por lo tanto, se puede instruir al rastreador para que realice peticiones HTTP(S) directas a direcciones que no deberían ser accesibles por los usuarios de la aplicación, incluyendo direcciones de bucle invertido, redes privadas RFC1918, direcciones de enlace local y servicios de metadatos en la nube como 169.254.169.254. Las tareas manuales del rastreador eluden la lista negra de dominios existente porque se les asigna una prioridad distinta de cero, y los literales IP ordinarios se clasifican como objetivos web y se obtienen directamente en lugar de a través de Tor u otro proxy. En consecuencia, un atacante puede usar el servidor AIL como un pivote de red para acceder a servicios disponibles desde el contexto de red del servidor. Las respuestas generadas por estas peticiones, incluyendo HTML capturado, capturas de pantalla y datos HAR, pueden ser accedidas posteriormente a través de la interfaz del rastreador. Esto hace que la SSRF no sea ciega y puede permitir a un atacante divulgar datos internos sensibles de la aplicación, información del servicio o metadatos y credenciales de instancias en la nube. El parche introduce una validación que resuelve los destinos del rastreador y rechaza las URL que resuelven a direcciones IP no globales, abordando objetivos de localhost, red privada y enlace local. -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Aug. 19, 2026
Action Type Old Value New Value Added SSVC {'id': 'CVE-2026-76164', 'role': 'CISA Coordinator', 'options': [{'exploitation': 'none'}, {'automatable': 'yes'}, {'technicalImpact': 'partial'}], 'version': '2.0.3', 'timestamp': '2026-08-19T15:44:36.357134Z'} -
New CVE Received by 5a6e4751-2f3f-4070-9419-94fb35b644e8
Aug. 19, 2026
Action Type Old Value New Value Added Affected [{'repo': 'https://github.com/ail-project/ail-framework/', 'vendor': 'ail-project', 'product': 'ail-framework', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '7.0', 'versionType': 'semver'}], 'defaultStatus': 'unaffected'}] Added Description AIL Framework contains a server-side request forgery (SSRF) vulnerability in its crawler submission functionality. A low-privileged authenticated user with access to the crawler interface can submit an arbitrary URL for crawling without adequate validation of the destination host. The crawler can therefore be instructed to make direct HTTP(S) requests to addresses that should not be reachable by application users, including loopback addresses, RFC1918 private networks, link-local addresses, and cloud metadata services such as 169.254.169.254. Manual crawler tasks bypass the existing domain blacklist because they are assigned a non-zero priority, and ordinary IP literals are classified as web targets and fetched directly rather than through Tor or another proxy. Consequently, an attacker can use the AIL server as a network pivot to access services available from the server's network context. Responses generated by these requests, including captured HTML, screenshots, and HAR data, can subsequently be accessed through the crawler interface. This makes the SSRF non-blind and may allow an attacker to disclose sensitive internal application data, service information, or cloud instance metadata and credentials. The patch introduces validation that resolves crawler destinations and rejects URLs resolving to non-global IP addresses, addressing localhost, private-network, and link-local targets. Added CVSS V4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Added CWE CWE-918 Added Reference https://github.com/ail-project/ail-framework/commit/d7b60ff9e20ee493895430b1a7c63d498a8fd780