Description
OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated attackers to reach cloud instance metadata services. Attackers can supply arbitrary provider URLs via the x-base-url header or baseUrl parameter to access sensitive cloud credentials and metadata.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| THU-MAIC | OpenMAIC | < 1.0.1 | 1.0.1 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
uziii2208/CVE-2026-86259 ★ 0 · Sep 14, 2026
OpenMAIC 1.0.0: Unauthenticated Outbound SSRF to Cloud Metadata Service via Fail-Open Middleware and Environment-Gated Validation Bypass
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- GitHub Security Advisory (GHSA-9m7h-vh2h-rc3w) vendor-advisory
- Fail-open access-code middleware at v1.0.0 technical-description
- NODE_ENV-gated SSRF validation at v1.0.0 technical-description
- OpenMAIC v1.0.1 Release Notes patch release-notes
- https://github.com/THU-MAIC/OpenMAIC product
- VulnCheck Advisory: OpenMAIC before 1.0.1 SSRF via Environment-Gated URL Validation third-party-advisory