GHSA-5qcg-q3jf-fjcg: Frappe Builder before 1.36.1 SSRF via convert_to_webp

Q: Who can exploit this issue?

A low-privilege authenticated user can exploit the vulnerable endpoint. They do not need user interaction, but they must be able to submit an image_url to the convert_to_webp API.

Q: Are deployments affected by default?

The issue is exposed through the convert_to_webp API endpoint in Frappe Builder versions before 1.36.1. The endpoint lacks the has_page_write access control used by similar asset-ingest handlers.

Q: What can an attacker access through the SSRF?

An attacker can cause the server to request internal network addresses or cloud metadata endpoints. DNS rebinding and open redirects can be used to bypass validation, and returned image responses may be saved to a world-readable /files/ URL for exfiltration; the behavior can also support blind internal-host probing.

Q: How can I determine whether an instance may be vulnerable?

Instances running a Frappe Builder version before 1.36.1 may be affected. Review access and request logs for convert_to_webp calls with image_url values targeting private or internal addresses, metadata-service addresses, redirectors, or attacker-controlled domains.

Published Oct 26, 2026

Updated

Frappe Builder versions before 1.36.1 contain a server-side request forgery vulnerability in the converttowebp API endpoint, which lacks the haspagewrite access control applied to similar asset-ingest handlers and performs an unprotected requests.get call that follows redirects without re-validating resolved IP addresses. A low-privilege authenticated user can supply an imageurl pointing to an internal address or use DNS rebinding and open redirects to make the server fetch internal network resources or cloud metadata endpoints, with successful image responses saved to a world-readable /files/ URL enabling data exfiltration or blind probing of internal hosts.

Affected Software

1 affected component

Frappe Builder<1.36.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Frappe Builder to a version that resolves this vulnerability.
Fixed in 1.36.1

Event History

Oct 26, 2026

CVE Published

via OSV·11:43 AM

Data Sourced

via OSV·11:43 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

A low-privilege authenticated user can exploit the vulnerable endpoint. They do not need user interaction, but they must be able to submit an image_url to the convert_to_webp API.

Are deployments affected by default?

The issue is exposed through the convert_to_webp API endpoint in Frappe Builder versions before 1.36.1. The endpoint lacks the has_page_write access control used by similar asset-ingest handlers.

What can an attacker access through the SSRF?

An attacker can cause the server to request internal network addresses or cloud metadata endpoints. DNS rebinding and open redirects can be used to bypass validation, and returned image responses may be saved to a world-readable /files/ URL for exfiltration; the behavior can also support blind internal-host probing.

How can I determine whether an instance may be vulnerable?

Instances running a Frappe Builder version before 1.36.1 may be affected. Review access and request logs for convert_to_webp calls with image_url values targeting private or internal addresses, metadata-service addresses, redirectors, or attacker-controlled domains.

GHSA-5qcg-q3jf-fjcg: Frappe Builder before 1.36.1 SSRF via convert_to_webp

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

Are deployments affected by default?

What can an attacker access through the SSRF?

How can I determine whether an instance may be vulnerable?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Are deployments affected by default?

What can an attacker access through the SSRF?

How can I determine whether an instance may be vulnerable?