CVE-2026-85662: Marqo 2.26.0 Server-Side Request Forgery via Media URLs
Marqo 2.26.0 contains a server-side request forgery vulnerability in the adddocuments endpoint that allows unauthenticated attackers to trigger requests to arbitrary URLs by supplying malicious media field values. Attackers can exploit downloadimagefromurl and fetchcontentsample functions which lack destination filtering and host validation to access internal services and cloud metadata endpoints.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Unauthenticated remote attackers can exploit the add_documents endpoint by supplying malicious values in media fields. No privileges or user interaction are required.
What can an attacker reach through the vulnerable server?
The vulnerable functions can be directed to arbitrary URLs, including internal services and cloud metadata endpoints. The stated impact is exposure of information; integrity and availability impacts are not identified.
How can I determine whether my deployment is affected?
The issue is reported in Marqo 2.26.0 and involves the add_documents endpoint processing media field values through download_image_from_url or fetch_content_sample. Deployments where this endpoint accepts attacker-controlled media URLs should be treated as exposed.