Description
A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/validation.ts of the component Add Remote Node API Endpoint. Such manipulation leads to server-side request forgery. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor confirms: "The node API URL could be configured by an authenticated user with node-management permission and used to initiate server-side requests. [T]he report demonstrates server-side request capability but not arbitrary internal response exfiltration."
Published: 2026-10-11
Score: 5.1 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Server‑Side Request Forgery
Action: Apply Patch
AI Analysis

Impact

The vulnerability in Studio‑Saelix Sencho up to version 0.97.1 arises from the isValidRemoteUrl function in backend/src/utils/validation.ts, which fails to validate remote node API URLs supplied by authenticated users. This omission allows an attacker to craft a URL that forces the server to make arbitrary outbound requests, resulting in a server‑side request forgery condition. While the disclosed exploit does not demonstrate capture of internal responses, the flaw does allow the server to initiate outbound traffic.

Affected Systems

Studio‑Saelix Sencho versions 0.97.1 and earlier are affected. The SSRF flaw exists in the Add Remote Node API Endpoint component.

Risk and Exploitability

The CVSS score is 5.1, indicating a medium‑risk exposure. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog. Attackers can execute the SSRF remotely by authenticating and possessing node‑management permissions. The flaw allows the server to make outbound requests to arbitrary URLs.

Generated by OpenCVE AI on October 11, 2026 at 04:46 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Deploy the latest Studio‑Saelix Sencho release that addresses the SSRF flaw, or apply the vendor‑provided patch if available.
  • Limit node‑management privileges to the minimum number of trusted administrators to reduce the likelihood that an attacker can reach the vulnerable endpoint.
  • Enforce outbound traffic filtering (e.g., firewall rules or a proxy) to block requests from the application server to internal IP ranges or to suspicious destinations.

Generated by OpenCVE AI on October 11, 2026 at 04:46 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 11 Oct 2026 03:15:00 +0000

Type Values Removed Values Added
Description A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/validation.ts of the component Add Remote Node API Endpoint. Such manipulation leads to server-side request forgery. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor confirms: "The node API URL could be configured by an authenticated user with node-management permission and used to initiate server-side requests. [T]he report demonstrates server-side request capability but not arbitrary internal response exfiltration."
Title Studio-Saelix Sencho Add Remote Node API Endpoint validation.ts isValidRemoteUrl server-side request forgery
First Time appeared Studio-saelix
Studio-saelix sencho
Weaknesses CWE-918
CPEs cpe:2.3:a:studio-saelix:sencho:*:*:*:*:*:*:*:*
Vendors & Products Studio-saelix
Studio-saelix sencho
References
Metrics cvssV2_0

{'score': 5.8, 'vector': 'AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:C'}

cvssV3_0

{'score': 4.7, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'}

cvssV3_1

{'score': 4.7, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'}

cvssV4_0

{'score': 5.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Studio-saelix Sencho
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-10-13T19:57:08.267Z

Reserved: 2026-10-10T12:48:35.614Z

Link: CVE-2026-108521

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-10-11T03:16:39.350

Modified: 2026-10-13T20:17:20.007

Link: CVE-2026-108521

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-11T12:23:11Z

Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)