HIGH 7.7 NVD
CVE-2026-72566
A server-side request forgery (SSRF) vulnerability in automatisch through commit 41f3c56 allows a low-privileged authenticated user with 'manage Flow' permissio
A server-side request forgery (SSRF) vulnerability in automatisch through commit 41f3c56 allows a low-privileged authenticated user with 'manage Flow' permission to make the server fetch arbitrary URLs and retrieve the full response body via the HTTP Request app's Custom Request action.
References
- https://github.com/automatisch/automatisch
- https://github.com/automatisch/automatisch/blob/main/packages/backend/src/apps/http-reques
This high severity vulnerability with a CVSS score of 7.7 was published on 2026-08-10 via NVD.
vulnfeed aggregates 9095 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.