CVE-2026-56712: Replicate Cog 0.23.1 SSRF via cog.File and cog.Path URL Inputs
Replicate Cog through 0.23.1 contains a server-side request forgery vulnerability that allows attackers to cause the Cog process to make server-side HTTP requests by submitting prediction inputs with attacker-controlled URLs that are not validated against the resolved destination host or IP before fetching. Attackers can supply malicious URLs or exploit HTTP redirects in cog.File and cog.Path predictor inputs to force requests to internal addresses, potentially exposing sensitive internal services or credentials.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed?
Replicate Cog versions through 0.23.1 are affected when predictors accept URL-based values through cog.File or cog.Path inputs. The issue affects the Cog process because it performs the fetch on the server side.
What access does an attacker need?
An attacker needs privileges to submit prediction inputs. No user interaction is required, and exploitation can use attacker-controlled URLs or HTTP redirects.
What can an attacker reach through this flaw?
The attacker may cause server-side HTTP requests to internal addresses because destination hosts and IP addresses are not validated after URL resolution. This could expose internal services or credentials accessible to the Cog process.