CVE-2026-116000: Zylon PrivateGPT URI Artifact Loader uri_loader.py load_file_from_uri server-side request forgery
A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function loadfilefromuri of the file privategpt/server/ingest/uriloader.py of the component URI Artifact Loader. Performing a manipulation of the argument Value results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
The vulnerability can be exploited remotely and does not require privileges or user interaction, according to the supplied CVSS vector. An attacker able to submit a manipulated Value argument to the affected URI-loading functionality could trigger server-side requests.
Which releases are identified as affected?
The affected releases identified are Zylon PrivateGPT 1.0.0 and 1.0.1.
Is exploit code available?
Yes. The provided data states that an exploit has been released publicly and may be used in attacks.
Is a vendor fix or response documented?
No vendor response is documented in the provided data. The vendor was contacted early about the disclosure but reportedly did not respond.