CVE-2026-85699: jina-ai reader server-side request forgery via redirect validation bypass
jina-ai reader contains a server-side request forgery vulnerability where URL validation is performed only on the initial request but not re-applied to subsequent redirect hops. Attackers can craft a public URL that redirects to internal network addresses or cloud metadata endpoints, allowing the server to fetch and return the target's response body to the attacker.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker does not need authentication or user interaction. They need to be able to cause the Reader server to fetch an attacker-controlled public URL that can redirect to an internal address or cloud metadata endpoint.
What information could be exposed?
The server can fetch the redirected internal target and return its response body to the attacker. This can expose responses from internal network services or cloud metadata endpoints reachable by the server.