---
id: CVE-2026-119712
title: PipesHub before 0.10.0 SSRF via Image URLs in Indexed Documents
summary: >-
  PipesHub before 0.10.0 contains a server-side request forgery vulnerability in
  ImageParser._fetch_single_url that allows attackers to make the indexing
  service fetch internal addresses by embedding image URLs in documents.
  Attackers can …
severity: medium
cvss: 6.4
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N'
cvssSource: cna
cwe:
  - CWE-918
vendor: pipeshub-ai
product: pipeshub-ai
affected:
  - pipeshub-ai < 0.10.0
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:41:18.486748Z'
exploitAvailable: true
published: '2026-10-30'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:41:37.331Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-119712'
references:
  - url: >-
      https://github.com/pipeshub-ai/pipeshub-ai/security/advisories/GHSA-mp2g-r37c-fx9q
    label: GitHub Security Advisory (GHSA-mp2g-r37c-fx9q)
  - url: >-
      https://github.com/pipeshub-ai/pipeshub-ai/commit/16b05ed7c4c492330046fa10753389a5a5886613
  - url: >-
      https://github.com/pipeshub-ai/pipeshub-ai/blob/v0.9.1/backend/python/app/modules/parsers/image_parser/image_parser.py
  - url: 'https://github.com/pipeshub-ai/pipeshub-ai/releases/tag/v0.10.0'
    label: pipeshub-ai v0.10.0 Release Notes
  - url: 'https://github.com/pipeshub-ai/pipeshub-ai'
  - url: >-
      https://www.vulncheck.com/advisories/pipeshub-before-0.10.0-ssrf-via-image-urls-in-indexed-documents
    label: >-
      VulnCheck Advisory: PipesHub before 0.10.0 SSRF via Image URLs in Indexed
      Documents
tags:
  - cve.org
  - exploit-available
epss: 0.00253
epssPercentile: 0.16869
exploits:
  github: 1
  githubRepos:
    - 'https://github.com/hyderpwn/CVE-pipeshub'
  checkedAt: '2026-11-05T22:39:08.740Z'
ingestedAt: '2026-11-05T16:07:30.408Z'
---

## Overview

PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser._fetch_single_url that allows attackers to make the indexing service fetch internal addresses by embedding image URLs in documents. Attackers can supply Markdown or HTML via uploads, synced mailboxes, or web connectors to reach loopback, private-network, or cloud metadata endpoints, with image responses embedded into indexed content.

## Affected

- `pipeshub-ai < 0.10.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.