Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2026-127083 (GCVE-0-2026-127083)

Vulnerability from nvd – Published: 2026-11-13 09:34 – Updated: 2026-11-13 09:34

Title

Huginn from 2026.09.09 before 2026.11.09 SSRF via OUTBOUND_PROXY Bypass

Summary

Huginn from 2026.09.09 before 2026.11.09 contains a server-side request forgery vulnerability because OutboundProxy.configure! applies the egress proxy only to Faraday and Typhoeus. Authenticated users can configure JiraAgent or WeiboPublishAgent to send HTTParty, open-uri or Net::HTTP requests directly to internal services, with JiraAgent returning response data as events.

Severity

5.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

6.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

CWE

CWE-918 - Server-Side Request Forgery (SSRF)

Assigner

VulnCheck CNA under the mitre root

CNA scorecard B 84/100 over 8124 records in the last 180 days details

References

6 references

URL	Tags
https://github.com/huginn/huginn/security/advisor…	vendor-advisory
https://github.com/huginn/huginn/commit/a6f5fb64a…	patch
https://github.com/huginn/huginn/blob/v2026.11.05…	technical-description
https://github.com/huginn/huginn/blob/v2026.11.05…	technical-description
https://github.com/huginn/huginn/releases/tag/v20…	release-notes
https://www.vulncheck.com/advisories/huginn-from-…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
huginn	huginn	Affected: 2026.09.09 , < 2026.11.09 (custom)

Date Public

2026-11-10 20:00

Credits

Sandipkumar sah Akinori Musha

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:github/huginn/huginn",
          "product": "huginn",
          "repo": "https://github.com/huginn/huginn",
          "vendor": "huginn",
          "versions": [
            {
              "lessThan": "2026.11.09",
              "status": "affected",
              "version": "2026.09.09",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Sandipkumar sah"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Akinori Musha"
        }
      ],
      "datePublic": "2026-11-10T20:00:42.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Huginn from 2026.09.09 before 2026.11.09 contains a server-side request forgery vulnerability because OutboundProxy.configure! applies the egress proxy only to Faraday and Typhoeus. Authenticated users can configure JiraAgent or WeiboPublishAgent to send HTTParty, open-uri or Net::HTTP requests directly to internal services, with JiraAgent returning response data as events."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "LOW",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-13T09:34:19.470Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "GitHub Security Advisory (GHSA-98rv-h5p4-9rgr)",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/huginn/huginn/security/advisories/GHSA-98rv-h5p4-9rgr"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/huginn/huginn/commit/a6f5fb64ac957f33fc6cdff6ab92884e372857a8"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/huginn/huginn/blob/v2026.11.05.2/lib/outbound_proxy.rb#L38-L42"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/huginn/huginn/blob/v2026.11.05.2/app/models/agents/jira_agent.rb#L108-L109"
        },
        {
          "name": "huginn v2026.11.09 Release Notes",
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/huginn/huginn/releases/tag/v2026.11.09"
        },
        {
          "name": "VulnCheck Advisory: Huginn from 2026.09.09 before 2026.11.09 SSRF via OUTBOUND_PROXY Bypass",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/huginn-from-2026.09.09-before-2026.11.09-ssrf-via-outbound-proxy-bypass"
        }
      ],
      "title": "Huginn from 2026.09.09 before 2026.11.09 SSRF via OUTBOUND_PROXY Bypass",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-127083",
    "datePublished": "2026-11-13T09:34:19.470Z",
    "dateReserved": "2026-11-12T14:14:13.455Z",
    "dateUpdated": "2026-11-13T09:34:19.470Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-127082 (GCVE-0-2026-127082)

Vulnerability from nvd – Published: 2026-11-13 09:34 – Updated: 2026-11-13 09:34

Title

Huginn before 2026.11.09 Information Exposure via JqAgent jq env Builtin

Summary

Huginn before 2026.11.09 contains an information exposure vulnerability in JqAgent that allows authenticated users to read the server process environment because the jq child process inherits it. Attackers who can create, configure or dry-run a JqAgent can supply a filter using env or $ENV to disclose APP_SECRET_TOKEN, database, SMTP and OAuth secrets.

Severity

8.3 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

7.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

CWE

CWE-497 - Exposure of Sensitive System Information to an Unauthorized Control Sphere

Assigner

VulnCheck CNA under the mitre root

CNA scorecard B 84/100 over 8124 records in the last 180 days details

References

5 references

URL	Tags
https://github.com/huginn/huginn/security/advisor…	vendor-advisory
https://github.com/huginn/huginn/commit/826f4bd47…	patch
https://github.com/huginn/huginn/blob/v2026.11.05…	technical-description
https://github.com/huginn/huginn/releases/tag/v20…	release-notes
https://www.vulncheck.com/advisories/huginn-befor…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
huginn	huginn	Affected: 0 , < 2026.11.09 (custom)

Date Public

2026-11-10 20:00

Credits

Sandipkumar sah Akinori Musha

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:github/huginn/huginn",
          "product": "huginn",
          "repo": "https://github.com/huginn/huginn",
          "vendor": "huginn",
          "versions": [
            {
              "lessThan": "2026.11.09",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Sandipkumar sah"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Akinori Musha"
        }
      ],
      "datePublic": "2026-11-10T20:00:39.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Huginn before 2026.11.09 contains an information exposure vulnerability in JqAgent that allows authenticated users to read the server process environment because the jq child process inherits it. Attackers who can create, configure or dry-run a JqAgent can supply a filter using env or $ENV to disclose APP_SECRET_TOKEN, database, SMTP and OAuth secrets."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-497",
              "description": "Exposure of Sensitive System Information to an Unauthorized Control Sphere",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-13T09:34:20.176Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "GitHub Security Advisory (GHSA-3f56-748g-q34j)",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/huginn/huginn/security/advisories/GHSA-3f56-748g-q34j"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/huginn/huginn/commit/826f4bd471c027660b1951408b44f9e5c5452aff"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/huginn/huginn/blob/v2026.11.05.2/app/models/agents/jq_agent.rb#L166"
        },
        {
          "name": "huginn v2026.11.09 Release Notes",
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/huginn/huginn/releases/tag/v2026.11.09"
        },
        {
          "name": "VulnCheck Advisory: Huginn before 2026.11.09 Information Exposure via JqAgent jq env Builtin",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/huginn-before-2026.11.09-information-exposure-via-jqagent-jq-env-builtin"
        }
      ],
      "title": "Huginn before 2026.11.09 Information Exposure via JqAgent jq env Builtin",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-127082",
    "datePublished": "2026-11-13T09:34:20.176Z",
    "dateReserved": "2026-11-12T14:14:13.059Z",
    "dateUpdated": "2026-11-13T09:34:20.176Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-123094 (GCVE-0-2026-123094)

Vulnerability from nvd – Published: 2026-11-05 15:11 – Updated: 2026-11-09 22:08

Title

Huginn before 2026.11.05 Stored XSS via OAuth Service Display Name

Summary

Huginn before 2026.11.05 contains a stored cross-site scripting vulnerability in the service_label helper that marks unescaped OAuth service display names as html_safe. Authenticated attackers can connect an OAuth account with a crafted nickname, name or email and share it globally, executing JavaScript when victims attach it to Agents and view them, exposing Credentials, Agents and Events, and admin actions if the victim is an administrator.

Severity

5.1 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

5.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-11-09 22:08 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

VulnCheck CNA under the mitre root

CNA scorecard B 84/100 over 8124 records in the last 180 days details

References

7 references

URL	Tags
https://github.com/huginn/huginn/security/advisor…	vendor-advisory
https://github.com/huginn/huginn/commit/92229a5e7…	patch
https://github.com/huginn/huginn/blob/v2026.11.01…	technical-description
https://hackmd.io/@leediay/SJtUoLFTfx	third-party-advisory
https://github.com/huginn/huginn/releases/tag/v20…	release-notes
https://github.com/huginn/huginn	product
https://www.vulncheck.com/advisories/huginn-befor…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
huginn	huginn	Affected: 0 , < 2026.11.05 (custom)

Date Public

2026-11-04 18:37

Credits

leediay153 from Viettel Post Akinori Musha

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-123094",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-11-09T22:08:21.169823Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-11-09T22:08:37.400Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:github/huginn/huginn",
          "product": "huginn",
          "repo": "https://github.com/huginn/huginn",
          "vendor": "huginn",
          "versions": [
            {
              "lessThan": "2026.11.05",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "leediay153 from Viettel Post"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Akinori Musha"
        }
      ],
      "datePublic": "2026-11-04T18:37:22.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Huginn before 2026.11.05 contains a stored cross-site scripting vulnerability in the service_label helper that marks unescaped OAuth service display names as html_safe. Authenticated attackers can connect an OAuth account with a crafted nickname, name or email and share it globally, executing JavaScript when victims attach it to Agents and view them, exposing Credentials, Agents and Events, and admin actions if the victim is an administrator."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "LOW",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-05T15:11:49.251Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "GitHub Security Advisory (GHSA-rjw9-xx87-f2ww)",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/huginn/huginn/security/advisories/GHSA-rjw9-xx87-f2ww"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/huginn/huginn/commit/92229a5e7343bfffc740d31e42b9654b212b678b"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/huginn/huginn/blob/v2026.11.01/app/helpers/application_helper.rb#L78-L88"
        },
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://hackmd.io/@leediay/SJtUoLFTfx"
        },
        {
          "name": "huginn v2026.11.05 Release Notes",
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/huginn/huginn/releases/tag/v2026.11.05"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://github.com/huginn/huginn"
        },
        {
          "name": "VulnCheck Advisory: Huginn before 2026.11.05 Stored XSS via OAuth Service Display Name",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/huginn-before-2026.11.05-stored-xss-via-oauth-service-display-name"
        }
      ],
      "title": "Huginn before 2026.11.05 Stored XSS via OAuth Service Display Name",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-123094",
    "datePublished": "2026-11-05T15:11:49.251Z",
    "dateReserved": "2026-11-05T12:22:12.771Z",
    "dateUpdated": "2026-11-09T22:08:37.400Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-63769 (GCVE-0-2026-63769)

Vulnerability from nvd – Published: 2026-07-20 19:05 – Updated: 2026-11-08 14:07 X_Open Source

Title

Huginn < 2026.09.09 SSRF via ScenarioImport fetch_url Method

Summary

Huginn before 2026.09.09 contains a server-side request forgery vulnerability in the fetch_url method of ScenarioImport that allows authenticated users to make arbitrary HTTP requests by submitting crafted URLs. Attackers can probe internal network services, enumerate ports via error signatures, and access cloud metadata endpoints to retrieve sensitive credentials.

Severity

6.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N

7.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-21 13:38 UTC

CWE

CWE-918 - Server-Side Request Forgery (SSRF)

Assigner

VulnCheck CNA under the mitre root

CNA scorecard B 84/100 over 8124 records in the last 180 days details

References

5 references

URL	Tags
https://github.com/huginn/huginn/issues/3679	technical-descriptionexploitissue-tracking
https://github.com/huginn/huginn/pull/3684	issue-trackingpatch
https://github.com/huginn/huginn/security/advisor…	vendor-advisory
https://github.com/huginn/huginn/releases/tag/v20…	release-notes
https://www.vulncheck.com/advisories/huginn-ssrf-…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
huginn	huginn	Affected: 0 , < 2026.09.09 (custom)

Date Public

2026-06-30 00:00

Credits

George Chen bugbunny-research xclow3n tikket1 5ud0er tonghuaroot

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-63769",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-21T13:38:57.178580Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-21T14:56:38.359Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:github/huginn/huginn",
          "product": "huginn",
          "repo": "https://github.com/huginn/huginn",
          "vendor": "huginn",
          "versions": [
            {
              "lessThan": "2026.09.09",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "George Chen"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "bugbunny-research"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "xclow3n"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "tikket1"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "5ud0er"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "tonghuaroot"
        }
      ],
      "datePublic": "2026-06-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Huginn before 2026.09.09 contains a server-side request forgery vulnerability in the fetch_url method of ScenarioImport that allows authenticated users to make arbitrary HTTP requests by submitting crafted URLs. Attackers can probe internal network services, enumerate ports via error signatures, and access cloud metadata endpoints to retrieve sensitive credentials."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-08T14:07:57.128Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "Researcher Disclosure",
          "tags": [
            "technical-description",
            "exploit",
            "issue-tracking"
          ],
          "url": "https://github.com/huginn/huginn/issues/3679"
        },
        {
          "name": "Pull Request",
          "tags": [
            "issue-tracking",
            "patch"
          ],
          "url": "https://github.com/huginn/huginn/pull/3684"
        },
        {
          "name": "GitHub Security Advisory (GHSA-f7cq-gj98-cfjp)",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/huginn/huginn/security/advisories/GHSA-f7cq-gj98-cfjp"
        },
        {
          "name": "huginn 2026.09.09 Release Notes",
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/huginn/huginn/releases/tag/v2026.09.09"
        },
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/huginn-ssrf-via-scenarioimport-fetch-url-method"
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "title": "Huginn \u003c 2026.09.09 SSRF via ScenarioImport fetch_url Method",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-63769",
    "datePublished": "2026-07-20T19:05:41.298Z",
    "dateReserved": "2026-07-18T12:34:08.780Z",
    "dateUpdated": "2026-11-08T14:07:57.128Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-127082 (GCVE-0-2026-127082)

Vulnerability from cvelistv5 – Published: 2026-11-13 09:34 – Updated: 2026-11-13 09:34

Title

Huginn before 2026.11.09 Information Exposure via JqAgent jq env Builtin

Summary

Huginn before 2026.11.09 contains an information exposure vulnerability in JqAgent that allows authenticated users to read the server process environment because the jq child process inherits it. Attackers who can create, configure or dry-run a JqAgent can supply a filter using env or $ENV to disclose APP_SECRET_TOKEN, database, SMTP and OAuth secrets.

Severity

8.3 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

7.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

CWE

CWE-497 - Exposure of Sensitive System Information to an Unauthorized Control Sphere

Assigner

VulnCheck CNA under the mitre root

CNA scorecard B 84/100 over 8124 records in the last 180 days details

References

5 references

URL	Tags
https://github.com/huginn/huginn/security/advisor…	vendor-advisory
https://github.com/huginn/huginn/commit/826f4bd47…	patch
https://github.com/huginn/huginn/blob/v2026.11.05…	technical-description
https://github.com/huginn/huginn/releases/tag/v20…	release-notes
https://www.vulncheck.com/advisories/huginn-befor…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
huginn	huginn	Affected: 0 , < 2026.11.09 (custom)

Date Public

2026-11-10 20:00

Credits

Sandipkumar sah Akinori Musha

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:github/huginn/huginn",
          "product": "huginn",
          "repo": "https://github.com/huginn/huginn",
          "vendor": "huginn",
          "versions": [
            {
              "lessThan": "2026.11.09",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Sandipkumar sah"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Akinori Musha"
        }
      ],
      "datePublic": "2026-11-10T20:00:39.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Huginn before 2026.11.09 contains an information exposure vulnerability in JqAgent that allows authenticated users to read the server process environment because the jq child process inherits it. Attackers who can create, configure or dry-run a JqAgent can supply a filter using env or $ENV to disclose APP_SECRET_TOKEN, database, SMTP and OAuth secrets."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-497",
              "description": "Exposure of Sensitive System Information to an Unauthorized Control Sphere",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-13T09:34:20.176Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "GitHub Security Advisory (GHSA-3f56-748g-q34j)",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/huginn/huginn/security/advisories/GHSA-3f56-748g-q34j"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/huginn/huginn/commit/826f4bd471c027660b1951408b44f9e5c5452aff"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/huginn/huginn/blob/v2026.11.05.2/app/models/agents/jq_agent.rb#L166"
        },
        {
          "name": "huginn v2026.11.09 Release Notes",
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/huginn/huginn/releases/tag/v2026.11.09"
        },
        {
          "name": "VulnCheck Advisory: Huginn before 2026.11.09 Information Exposure via JqAgent jq env Builtin",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/huginn-before-2026.11.09-information-exposure-via-jqagent-jq-env-builtin"
        }
      ],
      "title": "Huginn before 2026.11.09 Information Exposure via JqAgent jq env Builtin",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-127082",
    "datePublished": "2026-11-13T09:34:20.176Z",
    "dateReserved": "2026-11-12T14:14:13.059Z",
    "dateUpdated": "2026-11-13T09:34:20.176Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-127083 (GCVE-0-2026-127083)

Vulnerability from cvelistv5 – Published: 2026-11-13 09:34 – Updated: 2026-11-13 09:34

Title

Huginn from 2026.09.09 before 2026.11.09 SSRF via OUTBOUND_PROXY Bypass

Summary

Huginn from 2026.09.09 before 2026.11.09 contains a server-side request forgery vulnerability because OutboundProxy.configure! applies the egress proxy only to Faraday and Typhoeus. Authenticated users can configure JiraAgent or WeiboPublishAgent to send HTTParty, open-uri or Net::HTTP requests directly to internal services, with JiraAgent returning response data as events.

Severity

5.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

6.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

CWE

CWE-918 - Server-Side Request Forgery (SSRF)

Assigner

VulnCheck CNA under the mitre root

CNA scorecard B 84/100 over 8124 records in the last 180 days details

References

6 references

URL	Tags
https://github.com/huginn/huginn/security/advisor…	vendor-advisory
https://github.com/huginn/huginn/commit/a6f5fb64a…	patch
https://github.com/huginn/huginn/blob/v2026.11.05…	technical-description
https://github.com/huginn/huginn/blob/v2026.11.05…	technical-description
https://github.com/huginn/huginn/releases/tag/v20…	release-notes
https://www.vulncheck.com/advisories/huginn-from-…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
huginn	huginn	Affected: 2026.09.09 , < 2026.11.09 (custom)

Date Public

2026-11-10 20:00

Credits

Sandipkumar sah Akinori Musha

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:github/huginn/huginn",
          "product": "huginn",
          "repo": "https://github.com/huginn/huginn",
          "vendor": "huginn",
          "versions": [
            {
              "lessThan": "2026.11.09",
              "status": "affected",
              "version": "2026.09.09",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Sandipkumar sah"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Akinori Musha"
        }
      ],
      "datePublic": "2026-11-10T20:00:42.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Huginn from 2026.09.09 before 2026.11.09 contains a server-side request forgery vulnerability because OutboundProxy.configure! applies the egress proxy only to Faraday and Typhoeus. Authenticated users can configure JiraAgent or WeiboPublishAgent to send HTTParty, open-uri or Net::HTTP requests directly to internal services, with JiraAgent returning response data as events."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "LOW",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-13T09:34:19.470Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "GitHub Security Advisory (GHSA-98rv-h5p4-9rgr)",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/huginn/huginn/security/advisories/GHSA-98rv-h5p4-9rgr"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/huginn/huginn/commit/a6f5fb64ac957f33fc6cdff6ab92884e372857a8"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/huginn/huginn/blob/v2026.11.05.2/lib/outbound_proxy.rb#L38-L42"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/huginn/huginn/blob/v2026.11.05.2/app/models/agents/jira_agent.rb#L108-L109"
        },
        {
          "name": "huginn v2026.11.09 Release Notes",
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/huginn/huginn/releases/tag/v2026.11.09"
        },
        {
          "name": "VulnCheck Advisory: Huginn from 2026.09.09 before 2026.11.09 SSRF via OUTBOUND_PROXY Bypass",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/huginn-from-2026.09.09-before-2026.11.09-ssrf-via-outbound-proxy-bypass"
        }
      ],
      "title": "Huginn from 2026.09.09 before 2026.11.09 SSRF via OUTBOUND_PROXY Bypass",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-127083",
    "datePublished": "2026-11-13T09:34:19.470Z",
    "dateReserved": "2026-11-12T14:14:13.455Z",
    "dateUpdated": "2026-11-13T09:34:19.470Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-123094 (GCVE-0-2026-123094)

Vulnerability from cvelistv5 – Published: 2026-11-05 15:11 – Updated: 2026-11-09 22:08

Title

Huginn before 2026.11.05 Stored XSS via OAuth Service Display Name

Summary

Huginn before 2026.11.05 contains a stored cross-site scripting vulnerability in the service_label helper that marks unescaped OAuth service display names as html_safe. Authenticated attackers can connect an OAuth account with a crafted nickname, name or email and share it globally, executing JavaScript when victims attach it to Agents and view them, exposing Credentials, Agents and Events, and admin actions if the victim is an administrator.

Severity

5.1 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

5.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-11-09 22:08 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

VulnCheck CNA under the mitre root

CNA scorecard B 84/100 over 8124 records in the last 180 days details

References

7 references

URL	Tags
https://github.com/huginn/huginn/security/advisor…	vendor-advisory
https://github.com/huginn/huginn/commit/92229a5e7…	patch
https://github.com/huginn/huginn/blob/v2026.11.01…	technical-description
https://hackmd.io/@leediay/SJtUoLFTfx	third-party-advisory
https://github.com/huginn/huginn/releases/tag/v20…	release-notes
https://github.com/huginn/huginn	product
https://www.vulncheck.com/advisories/huginn-befor…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
huginn	huginn	Affected: 0 , < 2026.11.05 (custom)

Date Public

2026-11-04 18:37

Credits

leediay153 from Viettel Post Akinori Musha

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-123094",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-11-09T22:08:21.169823Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-11-09T22:08:37.400Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:github/huginn/huginn",
          "product": "huginn",
          "repo": "https://github.com/huginn/huginn",
          "vendor": "huginn",
          "versions": [
            {
              "lessThan": "2026.11.05",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "leediay153 from Viettel Post"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Akinori Musha"
        }
      ],
      "datePublic": "2026-11-04T18:37:22.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Huginn before 2026.11.05 contains a stored cross-site scripting vulnerability in the service_label helper that marks unescaped OAuth service display names as html_safe. Authenticated attackers can connect an OAuth account with a crafted nickname, name or email and share it globally, executing JavaScript when victims attach it to Agents and view them, exposing Credentials, Agents and Events, and admin actions if the victim is an administrator."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "LOW",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-05T15:11:49.251Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "GitHub Security Advisory (GHSA-rjw9-xx87-f2ww)",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/huginn/huginn/security/advisories/GHSA-rjw9-xx87-f2ww"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/huginn/huginn/commit/92229a5e7343bfffc740d31e42b9654b212b678b"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/huginn/huginn/blob/v2026.11.01/app/helpers/application_helper.rb#L78-L88"
        },
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://hackmd.io/@leediay/SJtUoLFTfx"
        },
        {
          "name": "huginn v2026.11.05 Release Notes",
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/huginn/huginn/releases/tag/v2026.11.05"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://github.com/huginn/huginn"
        },
        {
          "name": "VulnCheck Advisory: Huginn before 2026.11.05 Stored XSS via OAuth Service Display Name",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/huginn-before-2026.11.05-stored-xss-via-oauth-service-display-name"
        }
      ],
      "title": "Huginn before 2026.11.05 Stored XSS via OAuth Service Display Name",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-123094",
    "datePublished": "2026-11-05T15:11:49.251Z",
    "dateReserved": "2026-11-05T12:22:12.771Z",
    "dateUpdated": "2026-11-09T22:08:37.400Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-63769 (GCVE-0-2026-63769)

Vulnerability from cvelistv5 – Published: 2026-07-20 19:05 – Updated: 2026-11-08 14:07 X_Open Source

Title

Huginn < 2026.09.09 SSRF via ScenarioImport fetch_url Method

Summary

Huginn before 2026.09.09 contains a server-side request forgery vulnerability in the fetch_url method of ScenarioImport that allows authenticated users to make arbitrary HTTP requests by submitting crafted URLs. Attackers can probe internal network services, enumerate ports via error signatures, and access cloud metadata endpoints to retrieve sensitive credentials.

Severity

6.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N

7.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-21 13:38 UTC

CWE

CWE-918 - Server-Side Request Forgery (SSRF)

Assigner

VulnCheck CNA under the mitre root

CNA scorecard B 84/100 over 8124 records in the last 180 days details

References

5 references

URL	Tags
https://github.com/huginn/huginn/issues/3679	technical-descriptionexploitissue-tracking
https://github.com/huginn/huginn/pull/3684	issue-trackingpatch
https://github.com/huginn/huginn/security/advisor…	vendor-advisory
https://github.com/huginn/huginn/releases/tag/v20…	release-notes
https://www.vulncheck.com/advisories/huginn-ssrf-…	third-party-advisory

Impacted products

1 product

Vendor	Product	Version
huginn	huginn	Affected: 0 , < 2026.09.09 (custom)

Date Public

2026-06-30 00:00

Credits

George Chen bugbunny-research xclow3n tikket1 5ud0er tonghuaroot

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-63769",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-21T13:38:57.178580Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-21T14:56:38.359Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:github/huginn/huginn",
          "product": "huginn",
          "repo": "https://github.com/huginn/huginn",
          "vendor": "huginn",
          "versions": [
            {
              "lessThan": "2026.09.09",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "George Chen"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "bugbunny-research"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "xclow3n"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "tikket1"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "5ud0er"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "tonghuaroot"
        }
      ],
      "datePublic": "2026-06-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Huginn before 2026.09.09 contains a server-side request forgery vulnerability in the fetch_url method of ScenarioImport that allows authenticated users to make arbitrary HTTP requests by submitting crafted URLs. Attackers can probe internal network services, enumerate ports via error signatures, and access cloud metadata endpoints to retrieve sensitive credentials."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-08T14:07:57.128Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "Researcher Disclosure",
          "tags": [
            "technical-description",
            "exploit",
            "issue-tracking"
          ],
          "url": "https://github.com/huginn/huginn/issues/3679"
        },
        {
          "name": "Pull Request",
          "tags": [
            "issue-tracking",
            "patch"
          ],
          "url": "https://github.com/huginn/huginn/pull/3684"
        },
        {
          "name": "GitHub Security Advisory (GHSA-f7cq-gj98-cfjp)",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/huginn/huginn/security/advisories/GHSA-f7cq-gj98-cfjp"
        },
        {
          "name": "huginn 2026.09.09 Release Notes",
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/huginn/huginn/releases/tag/v2026.09.09"
        },
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/huginn-ssrf-via-scenarioimport-fetch-url-method"
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "title": "Huginn \u003c 2026.09.09 SSRF via ScenarioImport fetch_url Method",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-63769",
    "datePublished": "2026-07-20T19:05:41.298Z",
    "dateReserved": "2026-07-18T12:34:08.780Z",
    "dateUpdated": "2026-11-08T14:07:57.128Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Find a vulnerability

Search criteria

8 vulnerabilities by huginn

CVE-2026-127083 (GCVE-0-2026-127083)

CVE-2026-127082 (GCVE-0-2026-127082)

CVE-2026-123094 (GCVE-0-2026-123094)

CVE-2026-63769 (GCVE-0-2026-63769)

CVE-2026-127082 (GCVE-0-2026-127082)

CVE-2026-127083 (GCVE-0-2026-127083)

CVE-2026-123094 (GCVE-0-2026-123094)

CVE-2026-63769 (GCVE-0-2026-63769)