CVE-2026-125367: Pico through 4.1.2 SSRF in Feeds Service via run SSH Command
Pico through 4.1.2 contains a server-side request forgery vulnerability in the feeds service that allows signed-up users to make the server fetch arbitrary URLs via the run SSH command. Attackers can upload a feeds digest post listing internal URLs and trigger immediate fetching through Fetcher.ParseURL to reach loopback, RFC1918, and cloud metadata endpoints.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs to be a signed-up Pico user. No additional user interaction is required.
What access can an attacker obtain through the vulnerable request flow?
The attacker can cause the Pico server to fetch arbitrary URLs, including loopback addresses, RFC1918 private-network addresses, and cloud metadata endpoints. This can expose services and resources reachable from the server but not necessarily from the attacker’s network.
How is the vulnerable fetch triggered?
The attacker uploads a feeds digest post containing internal URLs and uses the run SSH command to trigger immediate fetching through Fetcher.ParseURL.
Which versions are affected?
Pico through version 4.1.2 is affected.