An authenticated user with permission to create notification hooks can include httpAgent/httpsAgent data in the request body of Slack, Discord, Mattermost, and Teams webhook plugins. The SSRF protection built into NocoDB is bypassed because these agents are not properly integrated into the request configuration. As a result, the application can make POST requests to any internal host, exposing the internal network to data exfiltration or further compromise. The weakness is identified as CWE‑918, an injection flaw that allows remote servers to be queried or acted upon.

NocoDB before version 2026.04.1 when the Slack, Discord, Mattermost, and Teams webhook plugins are used. The vulnerability requires an authenticated user who has permission to create hooks in these plugins.

The CVSS score of 4.3 indicates a moderate severity. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires authenticated access; a privileged user can abuse the flaw to send POST requests to arbitrary internal hosts. This could expose sensitive data or allow further lateral movement within the internal network.