Description
Swarms through 6.8.1, fixed in commit 8b0fc9e, contains a server-side request forgery vulnerability in the _is_safe_url function that fails to validate hostnames through DNS resolution, allowing attackers to bypass the blocklist. Attackers can supply user-controlled image or audio URLs that resolve to private, loopback, or metadata addresses to reach internal services and exfiltrate credentials.
Published: 2026-07-30
Score: 7.7 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A flaw in the _is_safe_url function of Swarms causes hostnames supplied by users to be validated only after DNS resolution, allowing attackers to supply image or audio URLs that resolve to private, loopback or metadata addresses. This bypasses the service blocklist and permits the server to reach internal resources and exfiltrate credentials, a classic Server‑Side Request Forgery scenario described by CWE‑918.

Affected Systems

The vulnerability affects Swarms versions up to and including 6.8.1, as used by the vendor kyegomez. The bug was fixed with commit 8b0fc9e4645603ad94d5fcf4da86e3b9c71f4743.

Risk and Exploitability

The CVSS score of 7.7 indicates a high‑severity flaw, and the EPSS score of 0.0029 (less than 1%) suggests a very low but non‑zero probability of exploitation, with none listed in KEV. Attackers can trigger the vulnerability by submitting a malicious media URL that the server will fetch, potentially discovering internal endpoints or credentials. The vulnerability is exploitable without special conditions, making it a significant threat if left unpatched.

Generated by OpenCVE AI on August 2, 2026 at 05:17 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade Swarms to a version that incorporates commit 8b0fc9e or later, or rebuild from source applying that patch
  • Configure the application to reject all URLs that resolve to private, loopback or internal IP ranges before they are fetched
  • If an upgrade is not immediately possible, disable the media upload endpoint that accepts remote URLs or isolate the Swarms instance from internal networks to prevent outbound connections to internal services

Generated by OpenCVE AI on August 2, 2026 at 05:17 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 30 Jul 2026 20:45:00 +0000

Type Values Removed Values Added
First Time appeared Kyegomez
Kyegomez swarms
Vendors & Products Kyegomez
Kyegomez swarms

Thu, 30 Jul 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 30 Jul 2026 15:00:00 +0000

Type Values Removed Values Added
Description Swarms through 6.8.1, fixed in commit 8b0fc9e, contains a server-side request forgery vulnerability in the _is_safe_url function that fails to validate hostnames through DNS resolution, allowing attackers to bypass the blocklist. Attackers can supply user-controlled image or audio URLs that resolve to private, loopback, or metadata addresses to reach internal services and exfiltrate credentials.
Title Swarms 6.8.1 Server-Side Request Forgery via DNS Rebinding Bypass
Weaknesses CWE-918
References
Metrics cvssV3_1

{'score': 8.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N'}

cvssV4_0

{'score': 7.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N'}

Subscriptions

Kyegomez Swarms
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-07-31T11:54:08.905Z

Reserved: 2026-07-29T13:09:45.993Z

Link: CVE-2026-67346

cve-icon Vulnrichment

Updated: 2026-07-30T17:29:35.667Z

cve-icon NVD

Status : Deferred

Published: 2026-07-30T15:16:35.953

Modified: 2026-07-30T19:18:36.957

Link: CVE-2026-67346

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-02T05:30:06Z

Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)