CVE-2026-116000

Zylon PrivateGPT URI Artifact Loader uri_loader.py load_file_from_uri server-side request forgery

View on CVE.org
Published Oct 25, 2026 CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Description
A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function load_file_from_uri of the file private_gpt/server/ingest/uri_loader.py of the component URI Artifact Loader. Performing a manipulation of the argument Value results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Analysis

AI-generated

Technical impact

Zylon PrivateGPT’s URI Artifact Loader contains a flaw in the load_file_from_uri routine that allows an attacker to manipulate the Value argument and force the server to perform outbound HTTP requests. This vulnerability is classified as a server‑side request forgery (CWE‑918) and can result in exposure of internal networks, data exfiltration, or further lateral movement. The impact is confined to the server hosting PrivateGPT, yet it can affect any internal service reachable from that host.

Affected Systems

The issue affects Zylon PrivateGPT 1.0.0 and 1.0.1 deployments. The problem resides in the private_gpt/server/ingest/uri_loader.py component, specifically the load_file_from_uri function; no vendor‑issued patch or fix has been released as of the last update.

Risk and Exploitability

The vulnerability is exploitable remotely and does not require local access or privileged credentials. Although EPSS data is unavailable and the weak is not listed in the CISA KEV catalog, a publicly available exploit exists on GitHub, demonstrating that the attack can be automated against unpatched systems. The CVSS score of 6.9 reflects moderate severity, and the lack of mitigation from the vendor heightens the risk until a formal patch or administrative barrier is applied.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Restrict the outbound network connections from the PrivateGPT service by configuring firewall rules or a proxy to allow traffic only to approved domains, thereby preventing unintended remote requests.
  • If the URI Artifact Loader feature is not essential to operations, disable or remove the load_file_from_uri functionality until a secure update is released.
  • Once a vendor‑issued patch becomes available for Zylon PrivateGPT 1.0.0 or 1.0.1, install it immediately to eliminate the exploitation vector.

Generated by OpenCVE AI on October 25, 2026 at 04:50 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function load_file_from_uri of the file private_gpt/server/ingest/uri_loader.py of the component URI Artifact Loader. Performing a manipulation of the argument Value results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Title Zylon PrivateGPT URI Artifact Loader uri_loader.py load_file_from_uri server-side request forgery
First Time appeared Zylon
Zylon privategpt
Weaknesses CWE-918
CPEs cpe:2.3:a:zylon:privategpt:*:*:*:*:*:*:*:*
Vendors & Products Zylon
Zylon privategpt
References
Metrics cvssV2_0

{'score': 7.5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C'}

cvssV3_0

{'score': 7.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'}

cvssV3_1

{'score': 7.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}
Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)

Sources

Status
PUBLISHED
Assigner
VulDB
Published
Updated
Oct 26, 2026, 5:37 PM
Reserved
Oct 24, 2026, 9:52 AM

View source JSON

Updated
Oct 26, 2026, 4:08 PM

JSON

Status
Deferred
Published
Oct 25, 2026, 3:16 AM
Modified
Oct 26, 2026, 6:17 PM

View source JSON

No data.

Updated
Oct 25, 2026, 5:00 AM

JSON