CVE-2026-108719 — LLMGateway through 1.20.0 Blind SSRF via Video-Generation callback_url
LLMGateway through 1.20.0 contains a blind server-side request forgery vulnerability that allows API key holders to reach internal hosts via the video-generation callback_url ex…
Published: 2026-10-11 · CVSS: 5.3 · CVSS 4.0
LLMGateway through 1.20.0 contains a blind server-side request forgery vulnerability that allows API key holders to reach internal hosts via the video-generation callback_url extension. Attackers can supply loopback, private, or cloud-metadata URLs that deliverWebhook POSTs to without the assertSafeWebhookTarget check, reaching internal services from the worker's network.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7