CVE-2026-121936: easyVoice before 0.0.23 SSRF via openaiBaseUrl in TTS API
easyVoice before 0.0.23 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server send POST requests by supplying openaiBaseUrl with useLLM enabled. Attackers can target loopback and internal services through /api/v1/tts endpoints, using reflected error messages in the x-generate-tts-warning header to probe internal hosts and ports.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
easyVoiceto a version that resolves this vulnerability.Fixed in 0.0.23
Event History
Frequently Asked Questions
Which deployments are exposed?
easyVoice versions before 0.0.23 are affected where the /api/v1/tts endpoint is reachable by an attacker. The vulnerable request path does not require authentication.
What does an attacker need to exploit this issue?
An attacker needs to submit a request to /api/v1/tts with useLLM enabled and a controlled openaiBaseUrl value. This causes the server to send a POST request to the supplied destination, including loopback or internal services.
Can this be used to discover internal services?
Yes. Reflected error messages in the x-generate-tts-warning response header can be used to probe internal hosts and ports.