Description
Kortix Suna 0.10.7 before 0.13.52 contains a server-side request forgery vulnerability that allows project managers to bypass the isPrivateIp guard by supplying IPv6 6to4 or Teredo addresses that embed private IPv4 destinations. Attackers holding project.connector.write can set connector base_url, OpenAPI, Postman, or MCP URLs to reach internal services and cloud metadata endpoints and read responses.
Published: 2026-10-10
Score: 2.3 Low
EPSS: < 1% Very Low
KEV: No
Impact: SSRF
Action: Patch
AI Analysis

Impact

Kortix Suna versions 0.10.7 through 0.13.51 contain a server‑side request forgery flaw that bypasses the isPrivateIp guard by using IPv6 6to4 or Teredo addresses that embed private IPv4 targets. Attackers with project.connector.write privileges can inject arbitrary connector base_url, OpenAPI, Postman, or MCP URLs, enabling requests to internal services and cloud metadata endpoints and allowing readback of their responses.

Affected Systems

Kortix Suna, an open‑source AI workflow platform, is affected. Versions from 0.10.7 up to 0.13.51 (any build before the 0.13.52 release) are vulnerable.

Risk and Exploitability

The CVSS score is 2.3, indicating a low‑severity flaw, and EPSS information is unavailable; it is not listed in CISA’s KEV catalog. Because the vulnerability is limited to users with project.connector.write rights, it is unlikely to be exploitable by unauthenticated attackers. Nevertheless, those with the required access can reach internal network resources, potentially exposing sensitive data or enabling further attacks.

Generated by OpenCVE AI on October 10, 2026 at 15:24 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade Kortix Suna to version 0.13.52 or later to apply the official SSRF guard patch.
  • Restrict project connector write permissions to trusted personnel only, reducing the opportunity for misuse.
  • Configure the connector base_url, OpenAPI, Postman, and MCP endpoints to external, whitelisted addresses and verify that internal network addresses are blocked or unreachable.
  • Consider implementing network segmentation or firewall rules that block outbound connections from the application to internal IP ranges.

Generated by OpenCVE AI on October 10, 2026 at 15:24 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 13 Oct 2026 12:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sat, 10 Oct 2026 15:45:00 +0000

Type Values Removed Values Added
First Time appeared Kortix-ai
Kortix-ai suna
Vendors & Products Kortix-ai
Kortix-ai suna

Sat, 10 Oct 2026 14:30:00 +0000

Type Values Removed Values Added
Description Kortix Suna 0.10.7 before 0.13.52 contains a server-side request forgery vulnerability that allows project managers to bypass the isPrivateIp guard by supplying IPv6 6to4 or Teredo addresses that embed private IPv4 destinations. Attackers holding project.connector.write can set connector base_url, OpenAPI, Postman, or MCP URLs to reach internal services and cloud metadata endpoints and read responses.
Title Kortix Suna 0.10.7 before 0.13.52 SSRF Guard Bypass via IPv6 6to4 Addresses
Weaknesses CWE-918
References
Metrics cvssV3_1

{'score': 4.9, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N'}

cvssV4_0

{'score': 2.3, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N'}

Subscriptions

Kortix-ai Suna
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-10-13T11:34:51.645Z

Reserved: 2026-10-09T13:44:40.884Z

Link: CVE-2026-108115

cve-icon Vulnrichment

Updated: 2026-10-13T11:33:29.475Z

cve-icon NVD

Status : Deferred

Published: 2026-10-10T15:16:57.270

Modified: 2026-10-16T19:18:44.867

Link: CVE-2026-108115

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-10T15:30:17Z

Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)