CVE-2026-85952: Server-side request forgery in Progress MarkLogic Server Linux cloud deployments
Affected Linux-based Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a server-side request forgery vulnerability that could allow an authenticated attacker to access internal cloud services, potentially resulting in unauthorized access to cloud credentials.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Progress MarkLogic Serverto a version that resolves this vulnerability.Fixed in 12.1.0 - Upgrade
Upgrade
Progress MarkLogic Serverto a version that resolves this vulnerability.Fixed in 11.3.7
Event History
Frequently Asked Questions
Which deployments are exposed?
The issue affects Linux-based Progress MarkLogic Server cloud deployments running 12.x before 12.1.0 or 11.x before 11.3.7. The provided information does not identify non-Linux or non-cloud deployments as affected.
What does an attacker need to exploit this issue?
An attacker needs authentication to the affected MarkLogic Server instance. No user interaction is required, and the attack can be performed over the network.
What is the potential impact in a cloud environment?
An authenticated attacker could use server-side request forgery to access internal cloud services. This may lead to unauthorized access to cloud credentials.
What versions address the vulnerability?
Upgrade affected 12.x deployments to 12.1.0 or later, and affected 11.x deployments to 11.3.7 or later.