CVE-2026-111320: ValueCell through 0.1.20 Unauthenticated SSRF via /api/v1/models/check
ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to direct backend requests by setting an unvalidated provider baseurl. Attackers can set baseurl via the provider config endpoint and trigger POST /api/v1/models/check to reach internal or metadata addresses, read error responses, and capture stored provider API keys.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
No authentication or user interaction is required. A remote attacker can set a provider base_url through the provider configuration endpoint and then invoke POST /api/v1/models/check.
What systems or data could be reached?
The vulnerable backend can be directed to make requests to internal services or metadata addresses. The attacker may read error responses and capture provider API keys stored by the application.
Are deployments affected by default?
The issue is described as unauthenticated and involves the provider configuration endpoint, so deployments exposing the affected API endpoints are at risk without requiring an existing account. The provided information does not state whether those endpoints are exposed in every default deployment.
How can I check whether a deployment is affected?
Verify whether the deployment is running ValueCell 0.1.20 or an earlier version and whether unauthenticated users can set a provider base_url and call POST /api/v1/models/check. Review provider configuration and model-check request logs for unexpected base_url values or requests targeting internal or metadata addresses.