CVE-2026-115813: Server-side request forgery in the model download path in Amazon Web Services Multi Model Server
Server-side request forgery in the model download path in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow remote actors to send requests to internal network destinations via a crafted model URL.
Multi Model Server is end of life and no fixed version is available. Users should discontinue use of Multi Model Server and migrate to a supported model serving solution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Amazon Web Services Multi Model Serverfrom your environment.Discontinue use of Multi Model Server.
Event History
Frequently Asked Questions
Who is exposed to this issue?
Deployments running Amazon Web Services Multi Model Server version 1.1.11 or earlier are affected. An attacker can target the server remotely using a crafted model URL.
What access does an attacker need?
The reported vector is network-accessible and requires no privileges or user interaction. Exploitation depends on the attacker being able to supply a crafted model URL to the model download path.
Is a patch available?
No fixed version is available because Multi Model Server is end of life. Users should discontinue its use and migrate to a supported model serving solution.
What is the impact of successful exploitation?
Successful exploitation may cause the server to send requests to internal network destinations. The stated impact is limited to confidentiality exposure; integrity and availability impacts are not listed.