Skip to content
OpenAdvisories

Vendor

kortix-ai

3 known vulnerabilities.

Products

suna 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.9
    CVE-2026-108115

    Kortix Suna 0.10.7 before 0.13.52 SSRF Guard Bypass via IPv6 6to4 Addresses

    Kortix Suna 0.10.7 before 0.13.52 contains a server-side request forgery vulnerability that allows project managers to bypass the isPrivateIp guard by supplying IPv6 6to4 or Teredo addresses that embed private IPv4 destinations. Attackers holding project.conn…

    kortix-ai suna
  • Medium 4.3
    CVE-2026-12811

    kortix-ai suna Auth Endpoint page.tsx router.push cross site scripting

    A weakness has been identified in kortix-ai suna up to 0.8.38. Affected by this issue is the function router.replace/router.push of the file apps/frontend/src/app/auth/page.tsx of the component Auth Endpoint. Executing a manipulation of the argument returnURL…

    kortix-ai suna