CVE-2026-85686: ms-swift 4.5.2 Unauthenticated SSRF via Multimodal Media URLs
ms-swift 4.5.2 contains a server-side request forgery vulnerability in the swift deploy OpenAI-compatible API that fetches multimodal media URLs without validation or redirect filtering. Unauthenticated attackers can supply arbitrary imageurl, audiourl, or videourl parameters to make the server issue requests to internal services and cloud metadata endpoints.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Deployments of the ms-swift 4.5.2 OpenAI-compatible API are exposed if they accept multimodal media URL parameters. Because authentication is not required, any network client able to reach the API can attempt exploitation.
What does an attacker need to do to exploit it?
An attacker only needs to submit an image_url, audio_url, or video_url parameter containing a chosen URL. The server fetches the supplied URL without validation or redirect filtering, allowing requests toward internal services or cloud metadata endpoints.
Are cloud metadata services at risk?
Yes. The described behavior can be used to cause the server to request cloud metadata endpoints, potentially exposing information returned by those services.