{"id":"CVE-2026-48818","title":"starlette: Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows (CVE-2026-48818)","summary":"A flaw was found in Starlette, a lightweight ASGI framework. On Windows systems, the StaticFiles component is vulnerable to Server-Side Request Forgery (SSRF). A remote attacker can exploit this by providing a specially crafted Universal N…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvssSource":"vendor","cwe":"CWE-918","vendor":"Red Hat","product":"Red Hat AI Inference Server 3.3","affected":["ai_inference_server 3.3"],"patched":["ai_inference_server 3.3"],"published":"2026-06-17","updated":"2026-10-15","sourceUpdated":"2026-10-15T11:03:35+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48818.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48818.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-48818"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2490020"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-48818"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48818"},{"url":"https://github.com/Kludex/starlette/commit/fd53168a7767b6b55ba5af787fd88f49e33cabc5"},{"url":"https://github.com/Kludex/starlette/pull/3287"},{"url":"https://github.com/Kludex/starlette/releases/tag/1.1.0"},{"url":"https://github.com/Kludex/starlette/security/advisories/GHSA-wqp7-x3pw-xc5r"},{"url":"https://access.redhat.com/errata/RHSA-2026:30089"},{"url":"https://access.redhat.com/errata/RHSA-2026:30088"},{"url":"https://access.redhat.com/errata/RHSA-2026:30087"},{"url":"https://github.com/Kludex/starlette"},{"url":"https://github.com/advisories/GHSA-wqp7-x3pw-xc5r"}],"tags":["csaf","vex","red-hat","osv","pip","ghsa"],"epss":0.00368,"epssPercentile":0.30485,"aliases":["GHSA-wqp7-x3pw-xc5r","PYSEC-2026-2281"],"ecosystem":"pip","ingestedAt":"2026-07-07T15:41:58.661Z","slug":"CVE-2026-48818","body":"## Overview\n\nA flaw was found in Starlette, a lightweight ASGI framework. On Windows systems, the StaticFiles component is vulnerable to Server-Side Request Forgery (SSRF). A remote attacker can exploit this by providing a specially crafted Universal Naming Convention (UNC) path, which causes the system to initiate an outbound Server Message Block (SMB) connection. This action can expose the service account's NTLMv2 credentials, potentially leading to information disclosure or further attacks.\n\n## Vendor advisories\n\n- **RHSA-2026:30089** · Red Hat · fixed in: Red Hat AI Inference Server 3.3 · released 2026-06-25 · [advisory](https://access.redhat.com/errata/RHSA-2026:30089)\n- **RHSA-2026:30088** · Red Hat · fixed in: Red Hat AI Inference Server 3.3 · released 2026-06-25 · [advisory](https://access.redhat.com/errata/RHSA-2026:30088)\n- **RHSA-2026:30087** · Red Hat · fixed in: Red Hat AI Inference Server 3.3 · released 2026-06-25 · [advisory](https://access.redhat.com/errata/RHSA-2026:30087)\n\n**starlette: Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows** — rated Important by Red Hat. Released 2026-06-17, updated 2026-10-15.\n\nFixed:\n\n- Red Hat AI Inference Server 3.3\n\nNot affected:\n\n- Exploit Intelligence\n- Migration Toolkit for Applications 8\n- OpenShift Lightspeed\n- Red Hat AI Inference Server\n- Red Hat Ansible Automation Platform 2\n- Red Hat Enterprise Linux AI (RHEL AI) 3\n- Red Hat Hardened Images\n- Red Hat OpenShift AI (RHOAI)\n- Red Hat Satellite 6\n\n## Remediation\n\nFor more information visit https://access.redhat.com/errata/RHSA-2026:30089 https://access.redhat.com/errata/RHSA-2026:30089\nFor more information visit https://access.redhat.com/errata/RHSA-2026:30088 https://access.redhat.com/errata/RHSA-2026:30088\nFor more information visit https://access.redhat.com/errata/RHSA-2026:30087 https://access.redhat.com/errata/RHSA-2026:30087\n\nWorkarounds / mitigations:\n\n- Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\n\n## Package advisory (CVE-2026-48818)\n\nAffected packages:\n\n- `starlette < 1.1.0`\n\nPatched in:\n\n- `starlette 1.1.0`\n\nSource: https://osv.dev/vulnerability/GHSA-wqp7-x3pw-xc5r","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}