CVE-2026-42864Critical· 9.9▾ MidnightFireFighter has unauthenticated SSRF in its Raid jira_bot endpoint that allows IAM credential theft
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 54.5 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 27.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
0.3%
The POST /api/v2/firefighter/raid/jira_bot endpoint (CreateJiraBotView) is
reachable without authentication (permission_classes = [permissions.AllowAny]).
Its attachments payload is fetched server-side via httpx.get() with no URL
validation, then uploaded as an attachment on the Jira ticket that gets created.
An unauthenticated caller able to reach the ingress can coerce the pod into
fetching arbitrary URLs — including the cloud metadata endpoint at
http://169.254.169.254/ — and exfiltrate the response as a Jira attachment.
On EC2/EKS deployments that do not enforce IMDSv2, this allows theft of the temporary AWS credentials attached to the pod's IAM role. The docstring on the view claims a Bearer token is required, but the code does not enforce it.
Affected code paths:
src/firefighter/raid/views/__init__.py — CreateJiraBotViewsrc/firefighter/raid/serializers.py — LandbotIssueRequestSerializer.attachmentssrc/firefighter/raid/client.py — RaidJiraClient.add_attachments_to_issueFixed in firefighter-incident 0.0.54:
CreateJiraBotView now enforces BearerTokenAuthentication + IsAuthenticated.attachments URLs are validated: http(s) scheme only, max 10 URLs, rejection
of any host resolving to a private, loopback, link-local, reserved, multicast
or unspecified IP (IPv4 and IPv6).KeyError('attachments') surfaced during regression testing.Users should upgrade to 0.0.54 or later.
Until upgrade is possible, any one of the following blocks end-to-end exploitation:
/api/v2/firefighter/raid/jira_bot to trusted
networks only (VPN, internal load balancer).RAID_JIRA_API_PASSWORD;
this breaks jira.create_issue() before the vulnerable attachment fetch is
reached (legitimate traffic is also blocked — emergency mitigation only).HttpPutResponseHopLimit=1 on EC2/EKS nodes. This does
not fix the SSRF itself but neutralises the IAM-credential-theft path.firefighter-incident < 0.0.54Upgrade to a patched release:
firefighter-incident 0.0.54Connected by shared product, vendor, weakness, or advisory.
CVE-2025-49652Critical· 9.8Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.
CVE-2025-61777Critical· 9.4Flag Forge is a Capture The Flag (CTF) platform
CVE-2025-14567Medium· 5.3A weakness has been identified in haxxorsid Stock-Management-System up to fbbbf213e9c93b87183a3891f77e3cc7095f22b0
CVE-2025-9815High· 7.8A weakness has been identified in alaneuler batteryKid up to 2.1 on macOS
CVE-2025-0108Critical· 9.1An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS management web inter…
CVE-2019-1895Critical· 9.8A vulnerability in the Virtual Network Computing (VNC) console implementation of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to access the VNC console session of an administrative …