CVE-2026-110719highSSRF & network2026-10-14
CVE-2026-110719: Portkey AI Gateway 1.14.0 through 1.15.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to reach loopback and Docker
Portkey AI Gateway 1.14.0 through 1.15.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to reach loopback and Docker host services because isValidCustomHost trusts localhost-style hosts when TRUSTED_CUSTOM_HOSTS is unset.
What it is
Portkey AI Gateway 1.14.0 through 1.15.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to reach loopback and Docker host services because isValidCustomHost trusts localhost-style hosts when TRUSTED_CUSTOM_HOSTS is unset. Attackers can send /v1 requests with a crafted x-portkey-custom-host header, such as via the ollama provider, to make the gateway call internal services and return their responses.
How to check
- Compare your installed version with the range above (command below).
How to fix
Sources
More advisories for this tool
- criticalCVE-2026-103663: Ollama /api/pull path traversal can lead to code execution as root
- criticalCVE-2026-61732: web pages can forge operator turns in the Decepticon hacking agent with ChatML tokens and run commands, upgrade to 1.1.17
- criticalCVE-2025-63389: Ollama Platform has missing authentication enabling attackers to perform model management operations
- highCVE-2026-59158: nuxt-ollama puts your Ollama cloud API key in every server-rendered page, upgrade to 1.3.1