Description
A security vulnerability has been detected in jina-ai reader up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1. This issue affects the function isValidTLD of the file /backend/functions/src/cloud-functions/crawler.ts of the component Crawler/Puppeteer. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-08-03
Score: 6.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is in the isValidTLD function in crawler.ts of the Jina AI Reader component Crawler/Puppeteer. By manipulating the input to isValidTLD, an attacker can influence the server to send arbitrary HTTP requests to any host. This results in a server‑side request forgery (SSRF) condition that can be exploited remotely. The impact includes unauthorized access to internal services, data leakage, or facilitation of further attacks. This weakness maps to CWE-918.

Affected Systems

This issue affects all Jina AI Reader deployments that include the Crawler/Puppeteer component up to commit 1574bfd380d249c86c82db4dace0d9c8fe17e2b1. No fixed version is publicly available, and the product follows a rolling release model. Deployments using earlier versions are potentially vulnerable.

Risk and Exploitability

The CVSS v3 base score is 6.9, indicating a medium severity. The EPSS score is not available, and the vulnerability is not yet listed in the CISA KEV catalog. However, the vulnerability has been publicly disclosed and remote exploitation is possible, suggesting a realistic threat. The likely attack vector is remote network access to the vulnerable function, and exploitation would require an attacker to supply crafted input to trigger the SSRF.

Generated by OpenCVE AI on August 4, 2026 at 09:45 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade to a newer release of Jina AI Reader that resolves the SSRF issue (ensure the commit is beyond 1574bfd380d249c86c82db4dace0d9c8fe17e2b1).
  • Disable or lock the Crawler/Puppeteer component or tighten isValidTLD to only allow a curated list of trusted domains.
  • Apply network segmentation or firewall rules to block outbound connections from the server to internal IP ranges and sensitive ports.

Generated by OpenCVE AI on August 4, 2026 at 09:45 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 04 Aug 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 03 Aug 2026 21:15:00 +0000

Type Values Removed Values Added
Description A security vulnerability has been detected in jina-ai reader up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1. This issue affects the function isValidTLD of the file /backend/functions/src/cloud-functions/crawler.ts of the component Crawler/Puppeteer. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way.
Title jina-ai reader Crawler/Puppeteer crawler.ts isValidTLD server-side request forgery
First Time appeared Jina-ai
Jina-ai reader
Weaknesses CWE-918
CPEs cpe:2.3:a:jina-ai:reader:*:*:*:*:*:*:*:*
Vendors & Products Jina-ai
Jina-ai reader
References
Metrics cvssV2_0

{'score': 7.5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 7.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 7.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Jina-ai Reader
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-08-04T15:05:17.869Z

Reserved: 2026-08-03T11:22:15.056Z

Link: CVE-2026-18647

cve-icon Vulnrichment

Updated: 2026-08-04T13:28:44.323Z

cve-icon NVD

Status : Deferred

Published: 2026-08-03T21:16:37.620

Modified: 2026-08-12T20:59:00.027

Link: CVE-2026-18647

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-04T10:00:04Z

Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)