CVE-2026-15143
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)
A flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition (XSD) string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file reads, potentially resulting in sensitive information disclosure, such as cloud provider credentials or access to internal network services.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
guardrails-detectors
- Vendor
- Unknown
- Product
- Unknown
- Platforms
- Unknown
- Default status
unaffected- Package
- guardrails-detectors
- Package collection
- https://github.com/trustyai-explainability/guardrails-detectors
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | git | 985c6d5a4a84360ff8b447b94e4a3cdfbda3da90 | Unavailable | None listed |
Red Hat OpenShift AI 2.25
- Vendor
- Red Hat
- Product
- Red Hat OpenShift AI 2.25
- Platforms
- Unknown
- Default status
affected- Package
- rhoai/odh-built-in-detector-rhel9
- Package collection
- https://catalog.redhat.com/software/containers/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1791364320 | unaffected | rpm | * | Unavailable | None listed |
Red Hat OpenShift AI 2.25
- Vendor
- Red Hat
- Product
- Red Hat OpenShift AI 2.25
- Platforms
- Unknown
- Default status
affected- Package
- rhoai/odh-guardrails-detector-huggingface-runtime-rhel9
- Package collection
- https://catalog.redhat.com/software/containers/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1791367475 | unaffected | rpm | * | Unavailable | None listed |
Red Hat OpenShift AI 3.4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift AI 3.4
- Platforms
- Unknown
- Default status
affected- Package
- rhoai/odh-built-in-detector-rhel9
- Package collection
- https://catalog.redhat.com/software/containers/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1791537794 | unaffected | rpm | * | Unavailable | None listed |
Red Hat OpenShift AI 3.4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift AI 3.4
- Platforms
- Unknown
- Default status
affected- Package
- rhoai/odh-guardrails-detector-huggingface-runtime-rhel9
- Package collection
- https://catalog.redhat.com/software/containers/
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 1791535841 | unaffected | rpm | * | Unavailable | None listed |