cveboard RSS feed

CVE-2026-82757

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2026
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

ash_authentication_oauth2_server CIMD fetcher classifies IPv4-in-IPv6 and site-local addresses as public, allowing SSRF

Server-Side Request Forgery (SSRF) vulnerability in ash-project ash_authentication_oauth2_server allows an attacker who controls a client metadata URL and its DNS to make the server connect to internal or loopback addresses. public_ip?/1 in AshAuthentication.Oauth2Server.CIMD.ReqFetcher enforces the outbound policy for CIMD metadata fetches. It classified several address forms as publicly routable that are not: IPv4-compatible ::/96 (for example ::127.0.0.1), SIIT IPv4-translated ::ffff:0:0:0/96, and deprecated site-local fec0::/10. A returned AAAA record in one of these ranges passed the policy, so a fetch pinned to that address reached space the policy was meant to block. This issue affects ash_authentication_oauth2_server: from 0.3.0 before 0.3.1.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

ash_authentication_oauth2_server

Vendor
ash-project
Product
ash_authentication_oauth2_server
Platforms
Unknown
Default status
unaffected
Package
ash_authentication_oauth2_server
Package collection
https://repo.hex.pm
ash_authentication_oauth2_server · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0.3.0affectedsemver0.3.1UnavailableNone listed

ash_authentication_oauth2_server

Vendor
ash-project
Product
ash_authentication_oauth2_server
Platforms
Unknown
Default status
unaffected
Package
ash-project/ash_authentication_oauth2_server
Package collection
https://github.com
ash_authentication_oauth2_server · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
e713a9ba816761140c226e2ca55b75c0b93f5984affectedgit268b591261a3473ab9b87272963e4dd2fd99d972UnavailableNone listed