{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-122140", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2026-11-04T18:13:13.906Z", "datePublished": "2026-11-04T20:36:57.196Z", "dateUpdated": "2026-11-09T16:58:58.374Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-11-04T20:36:57.196Z"}, "datePublic": "2026-11-03T23:47:57.000Z", "title": "Trawl 1.5.0 before 1.10.0 SSRF via IPv4-mapped IPv6 MCP Policy Bypass", "descriptions": [{"lang": "en", "value": "Trawl 1.5.0 before 1.10.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to bypass the MCP outbound URL policy using IPv4-mapped IPv6 addresses. Attackers can supply hex-normalized addresses like ::ffff:7f00:1 directly or via redirects to fetch loopback, private, and cloud metadata services and read responses."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Server-Side Request Forgery (SSRF)", "cweId": "CWE-918", "type": "CWE"}]}], "affected": [{"vendor": "germondai", "product": "trawl", "defaultStatus": "unaffected", "versions": [{"version": "1.5.0", "lessThan": "1.10.0", "status": "affected", "versionType": "semver"}], "packageURL": "pkg:github/germondai/trawl", "repo": "https://github.com/germondai/trawl"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N", "attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "baseScore": 6.3, "baseSeverity": "MEDIUM"}}, {"format": "CVSS", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "baseSeverity": "MEDIUM"}}], "references": [{"url": "https://github.com/germondai/trawl/security/advisories/GHSA-mj45-84p2-v77q", "tags": ["vendor-advisory"], "name": "GitHub Security Advisory (GHSA-mj45-84p2-v77q)"}, {"url": "https://github.com/germondai/trawl/commit/17cdb33a9a6a8200cf8f9fd6a57b295b04ee5173", "tags": ["patch"]}, {"url": "https://github.com/germondai/trawl/pull/263", "tags": ["patch", "issue-tracking"]}, {"url": "https://github.com/germondai/trawl/releases/tag/v1.10.0", "tags": ["release-notes"], "name": "trawl v1.10.0 Release Notes"}, {"url": "https://github.com/germondai/trawl/blob/v1.9.3/apps/api/src/outbound-policy.ts#L55-L56", "tags": ["technical-description"]}, {"name": "VulnCheck Advisory: Trawl 1.5.0 before 1.10.0 SSRF via IPv4-mapped IPv6 MCP Policy Bypass", "tags": ["third-party-advisory"], "url": "https://www.vulncheck.com/advisories/trawl-1.5.0-before-1.10.0-ssrf-via-ipv4-mapped-ipv6-mcp-policy-bypass"}], "credits": [{"lang": "en", "value": "Leardian", "type": "finder"}, {"lang": "en", "value": "Komiljon Ayubov", "type": "reporter"}], "x_generator": {"engine": "vulncheck-endgame"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-09T16:09:20.449857Z", "id": "CVE-2026-122140", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-09T16:58:58.374Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-122140", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2026-11-04T18:13:13.906Z", "datePublished": "2026-11-04T20:36:57.196Z", "dateUpdated": "2026-11-09T16:58:58.374Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-11-04T20:36:57.196Z"}, "datePublic": "2026-11-03T23:47:57.000Z", "title": "Trawl 1.5.0 before 1.10.0 SSRF via IPv4-mapped IPv6 MCP Policy Bypass", "descriptions": [{"lang": "en", "value": "Trawl 1.5.0 before 1.10.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to bypass the MCP outbound URL policy using IPv4-mapped IPv6 addresses. Attackers can supply hex-normalized addresses like ::ffff:7f00:1 directly or via redirects to fetch loopback, private, and cloud metadata services and read responses."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Server-Side Request Forgery (SSRF)", "cweId": "CWE-918", "type": "CWE"}]}], "affected": [{"vendor": "germondai", "product": "trawl", "defaultStatus": "unaffected", "versions": [{"version": "1.5.0", "lessThan": "1.10.0", "status": "affected", "versionType": "semver"}], "packageURL": "pkg:github/germondai/trawl", "repo": "https://github.com/germondai/trawl"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N", "attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "baseScore": 6.3, "baseSeverity": "MEDIUM"}}, {"format": "CVSS", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "baseSeverity": "MEDIUM"}}], "references": [{"url": "https://github.com/germondai/trawl/security/advisories/GHSA-mj45-84p2-v77q", "tags": ["vendor-advisory"], "name": "GitHub Security Advisory (GHSA-mj45-84p2-v77q)"}, {"url": "https://github.com/germondai/trawl/commit/17cdb33a9a6a8200cf8f9fd6a57b295b04ee5173", "tags": ["patch"]}, {"url": "https://github.com/germondai/trawl/pull/263", "tags": ["patch", "issue-tracking"]}, {"url": "https://github.com/germondai/trawl/releases/tag/v1.10.0", "tags": ["release-notes"], "name": "trawl v1.10.0 Release Notes"}, {"url": "https://github.com/germondai/trawl/blob/v1.9.3/apps/api/src/outbound-policy.ts#L55-L56", "tags": ["technical-description"]}, {"name": "VulnCheck Advisory: Trawl 1.5.0 before 1.10.0 SSRF via IPv4-mapped IPv6 MCP Policy Bypass", "tags": ["third-party-advisory"], "url": "https://www.vulncheck.com/advisories/trawl-1.5.0-before-1.10.0-ssrf-via-ipv4-mapped-ipv6-mcp-policy-bypass"}], "credits": [{"lang": "en", "value": "Leardian", "type": "finder"}, {"lang": "en", "value": "Komiljon Ayubov", "type": "reporter"}], "x_generator": {"engine": "vulncheck-endgame"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-122140", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-09T16:09:20.449857Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-09T16:09:21.522Z"}}]}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "packageURL": "pkg:github/germondai/trawl", "product": "trawl", "repo": "https://github.com/germondai/trawl", "vendor": "germondai", "versions": [{"lessThan": "1.10.0", "status": "affected", "version": "1.5.0", "versionType": "semver"}]}], "source": "disclosure@vulncheck.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Trawl 1.5.0 before 1.10.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to bypass the MCP outbound URL policy using IPv4-mapped IPv6 addresses. Attackers can supply hex-normalized addresses like ::ffff:7f00:1 directly or via redirects to fetch loopback, private, and cloud metadata services and read responses."}], "id": "CVE-2026-122140", "lastModified": "2026-11-09T17:17:21.343", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-122140", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-09T16:09:20.449857Z", "version": "2.0.3"}}]}, "published": "2026-11-04T21:18:10.370", "references": [{"source": "disclosure@vulncheck.com", "url": "https://github.com/germondai/trawl/blob/v1.9.3/apps/api/src/outbound-policy.ts#L55-L56"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/germondai/trawl/commit/17cdb33a9a6a8200cf8f9fd6a57b295b04ee5173"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/germondai/trawl/pull/263"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/germondai/trawl/releases/tag/v1.10.0"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/germondai/trawl/security/advisories/GHSA-mj45-84p2-v77q"}, {"source": "disclosure@vulncheck.com", "url": "https://www.vulncheck.com/advisories/trawl-1.5.0-before-1.10.0-ssrf-via-ipv4-mapped-ipv6-mcp-policy-bypass"}], "sourceIdentifier": "disclosure@vulncheck.com", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-918"}], "source": "disclosure@vulncheck.com", "type": "Secondary"}]}

{"bugzilla": {"description": "trawl: trawl: Server-Side Request Forgery via IPv4-mapped IPv6 addresses", "id": "2567483", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2567483"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.3", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "status": "draft"}, "cwe": "CWE-918", "details": ["Trawl 1.5.0 before 1.10.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to bypass the MCP outbound URL policy using IPv4-mapped IPv6 addresses. Attackers can supply hex-normalized addresses like ::ffff:7f00:1 directly or via redirects to fetch loopback, private, and cloud metadata services and read responses.", "A flaw was found in trawl. This issue allows an unauthenticated remote attacker to bypass outbound URL security controls by supplying IPv4-mapped IPv6 addresses directly or through redirects. Successful exploitation of this Server-Side Request Forgery (SSRF) vulnerability allows an attacker to query restricted internal network endpoints, such as cloud metadata services and local loopback addresses, resulting in unauthorized information disclosure."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}, "name": "CVE-2026-122140", "public_date": "2026-11-04T20:36:57Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-122140\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-122140\nhttps://github.com/germondai/trawl/blob/v1.9.3/apps/api/src/outbound-policy.ts#L55-L56\nhttps://github.com/germondai/trawl/commit/17cdb33a9a6a8200cf8f9fd6a57b295b04ee5173\nhttps://github.com/germondai/trawl/pull/263\nhttps://github.com/germondai/trawl/releases/tag/v1.10.0\nhttps://github.com/germondai/trawl/security/advisories/GHSA-mj45-84p2-v77q\nhttps://www.vulncheck.com/advisories/trawl-1.5.0-before-1.10.0-ssrf-via-ipv4-mapped-ipv6-mcp-policy-bypass"], "statement": "Moderate severity is assigned to this flaw because while an unauthenticated attacker can circumvent outbound request filters to query internal endpoints, the exploit only grants read access to network responses without enabling remote code execution or data tampering. Furthermore, the trawl package is not included or deployed in supported Red Hat products, significantly reducing direct exposure across enterprise environments.", "threat_severity": "Moderate"}