Skip to content
OpenAdvisories

Vendor

Portkey-AI

3 known vulnerabilities.

Products

gateway 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2026-110719

    Portkey AI Gateway 1.14.0 through 1.15.2 SSRF via x-portkey-custom-host Header

    Portkey AI Gateway 1.14.0 through 1.15.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to reach loopback and Docker host services because isValidCustomHost trusts localhost-style hosts when TRUSTED_CUSTOM_HOSTS is …

    Portkey-AI gateway
  • High 7.5
    CVE-2026-82270

    Portkey AI Gateway Server-Side Request Forgery via /v1/proxy/*

    Portkey AI Gateway through 1.15.2 contains a server-side request forgery vulnerability in the /v1/proxy/* route that lacks requestValidator middleware. Attackers can set the x-portkey-custom-host header to internal addresses and forward requests with Authoriz…

    Portkey-AI gateway