CVE-2026-114362 - Vulnerability Details

- HarnessRouter Targets Test Endpoint app.py server-side request forgery

Description

A flaw has been found in HarnessRouter up to 0.31.12. This impacts an unknown function of the file gateway/app.py of the component Targets Test Endpoint. Executing a manipulation of the argument base_url can lead to server-side request forgery. The attack may be performed from remote. Upgrading to version 0.31.13 will fix this issue. This patch is called 1c4b1fc1f89737dabd089ac1d1c174a57f764e28. It is suggested to upgrade the affected component.

Published: 2026-10-21

Score: 5.3 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

A server‑side request forgery flaw exists in the Targets Test Endpoint component of HarnessRouter. The vulnerability arises from improper handling of the base_url argument in the gateway/app.py file, allowing an attacker to manipulate outbound requests made by the server. This weakness is categorized as CWE‑918 and can be leveraged to use the vulnerable system as a proxy to reach internal or external resources, compromising confidentiality and potentially availability.

Affected Systems

Versions of HarnessRouter up to and including 0.31.12 are affected. The component at gateway/app.py, specifically the Targets Test Endpoint, is responsible for the flaw. Upgrading to version 0.31.13, which contains commit 1c4b1fc1f89737dabd089ac1d1c174a57f764e28, resolves the issue.

Risk and Exploitability

The CVSS score of 5.3 indicates a moderate severity, and the vulnerability can be triggered remotely by manipulating the base_url parameter. No EPSS score is available, and the issue is not listed in CISA’s KEV catalog. Attackers require only the ability to send a crafted request to the vulnerable endpoint; no additional privileges are necessary. The risk to exposed systems is significant if the server can reach internal networks or external services without further defense‑in‑depth controls.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

n/a

HarnessRouter

affected

Version	Status	Constraints
`0.31.0`	affected	—
`0.31.1`	affected	—
`0.31.2`	affected	—
`0.31.3`	affected	—
`0.31.4`	affected	—
`0.31.5`	affected	—
`0.31.6`	affected	—
`0.31.7`	affected	—
`0.31.8`	affected	—
`0.31.9`	affected	—
`0.31.10`	affected	—
`0.31.11`	affected	—
`0.31.12`	affected	—
`0.31.13`	unaffected	—

No data.

Vendor Product Confidence Versions

Harnessrouter

90%

Version	Status	Scheme	Platform
`0.31.0`	affected	semver	—
`0.31.1`	affected	semver	—
`0.31.2`	affected	semver	—
`0.31.3`	affected	semver	—
`0.31.4`	affected	semver	—
`0.31.5`	affected	semver	—
`0.31.6`	affected	semver	—
`0.31.7`	affected	semver	—
`0.31.8`	affected	semver	—
`0.31.9`	affected	semver	—
`0.31.10`	affected	semver	—
`0.31.11`	affected	semver	—
`0.31.12`	affected	semver	—
`0.31.13`	unaffected	semver	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade HarnessRouter to version 0.31.13 or later, which includes the resolved commit.
Restrict the server’s outbound traffic using firewall rules or network segmentation so that even if SSRF is triggered, it cannot access sensitive resources.
Validate or sanitize the base_url parameter at input time to reject URLs that point to internal or disallowed domains.

Generated by OpenCVE AI on October 22, 2026 at 03:36 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.00245.

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://github.com/HarnessRouter/harnessrouter/
https://github.com/HarnessRouter/harnessrouter/commit/1c4b1fc1f89737dabd089ac1d1c174a57f764e28
https://github.com/HarnessRouter/harnessrouter/pull/429
https://github.com/HarnessRouter/harnessrouter/releases/tag/v0.31.13
https://github.com/HarnessRouter/harnessrouter/security/advisories/GHSA-c5g7-c47h-f6c3
https://vuldb.com/cve/CVE-2026-114362
https://vuldb.com/submit/1019387
https://vuldb.com/vuln/424709
https://vuldb.com/vuln/424709/cti

History

Wed, 28 Oct 2026 02:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 21 Oct 2026 19:30:00 +0000

Type	Values Removed	Values Added
Description		A flaw has been found in HarnessRouter up to 0.31.12. This impacts an unknown function of the file gateway/app.py of the component Targets Test Endpoint. Executing a manipulation of the argument base_url can lead to server-side request forgery. The attack may be performed from remote. Upgrading to version 0.31.13 will fix this issue. This patch is called 1c4b1fc1f89737dabd089ac1d1c174a57f764e28. It is suggested to upgrade the affected component.
Title		HarnessRouter Targets Test Endpoint app.py server-side request forgery
First Time appeared		Harnessrouter Harnessrouter harnessrouter
Weaknesses		CWE-918
CPEs		cpe:2.3:h:harnessrouter:harnessrouter::::::::
Vendors & Products		Harnessrouter Harnessrouter harnessrouter
References		https://github.com/HarnessRouter/harnessrouter/ https://github.com/HarnessRouter/harnessrouter/commit/1c4b1fc1f89737dabd089ac1d1c174a57f764e28 https://github.com/HarnessRouter/harnessrouter/pull/429 https://github.com/HarnessRouter/harnessrouter/releases/tag/v0.31.13 https://github.com/HarnessRouter/harnessrouter/security/advisories/GHSA-c5g7-c47h-f6c3 https://vuldb.com/cve/CVE-2026-114362 https://vuldb.com/submit/1019387 https://vuldb.com/vuln/424709 https://vuldb.com/vuln/424709/cti
Metrics		cvssV2_0 `{'score': 6.5, 'vector': 'AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C'}` cvssV3_0 `{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C'}` cvssV3_1 `{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C'}` cvssV4_0 `{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X'}`

Subscriptions

Harnessrouter Harnessrouter

MITRE

Status: PUBLISHED

Assigner: VulDB

Published: 2026-10-21T19:15:12.924Z

Updated: 2026-10-28T01:33:22.048Z

Reserved: 2026-10-21T09:01:12.834Z

Link: CVE-2026-114362

Vulnrichment

Updated: 2026-10-28T01:33:16.631Z

NVD

Status : Deferred

Published: 2026-10-21T20:17:25.710

Modified: 2026-10-28T02:17:06.403

Link: CVE-2026-114362

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-10-22T03:45:18Z

Weaknesses

CWE-918
Server-Side Request Forgery (SSRF)

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Exploitation none

Automatable no

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object