CVE-2026-108602: Helicone through v2025.08.21-1 SSRF via Jawn Webhook Sender DNS Resolution
Helicone through v2025.08.21-1 contains a server-side request forgery vulnerability in the Jawn webhook sender that allows authenticated organization users to reach internal services by using hostnames resolving to private addresses. Attackers can create webhooks with public hostnames that resolve or DNS-rebind to loopback or internal addresses, causing blind POST requests to internal HTTPS services.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated Helicone organization user can exploit it by creating a webhook. The attacker needs control of, or the ability to influence DNS for, a public hostname that resolves or rebinds to a loopback or internal address.
What systems are exposed through the vulnerable webhook sender?
Internal HTTPS services reachable from the Helicone server are exposed to blind POST requests. The provided information does not establish whether response data can be read by the attacker.
How can I determine whether my deployment is affected?
Deployments running Helicone through v2025.08.21-1 are affected if organization users can create webhooks and the Jawn webhook sender can resolve webhook hostnames to private or loopback addresses.