Description
ms-swift 4.5.2 contains a server-side request forgery vulnerability in the swift deploy OpenAI-compatible API that fetches multimodal media URLs without validation or redirect filtering. Unauthenticated attackers can supply arbitrary image_url, audio_url, or video_url parameters to make the server issue requests to internal services and cloud metadata endpoints.
Published: 2026-09-04
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: Server‑Side Request Forgery
Action: Immediate Patch
AI Analysis

Impact

A Server‑Side Request Forgery (SSRF) flaw exists in the swift deploy API of ms‑swift 4.5.2. The API accepts multipart image, audio, and video URLs without validating them or filtering redirects. Consequently, an unauthenticated attacker can instruct the server to fetch arbitrary resources, potentially exposing internal services or cloud metadata endpoints. The weakness is a classic CWE‑918 scenario where external input is not properly sandboxed.

Affected Systems

The vulnerability affects the modelScope ms‑swift package, version 4.5.2. No other versions or vendor products are listed as impacted in the advisory.

Risk and Exploitability

With a CVSS score of 8.7, this issue is considered a high‑severity vulnerability. The EPSS score is not available, and the flaw is not listed in the CISA KEV catalog, though the lack of authentication could still make it attractive to attackers. Because the vector requires only unauthenticated remote calls to the API, exploitation can be achieved from any external network without credentials, allowing attackers to probe internal infrastructure.

Generated by OpenCVE AI on September 4, 2026 at 15:46 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade ms‑swift to a version that implements input validation for media URLs.
  • Configure firewall or network segmentation to restrict outbound traffic from the ms‑swift service to internal or metadata endpoints.
  • Consider disabling the multimodal media URL feature on non‑production or untrusted instances until a patch is applied.

Generated by OpenCVE AI on September 4, 2026 at 15:46 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 10 Sep 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 04 Sep 2026 16:00:00 +0000

Type Values Removed Values Added
First Time appeared Modelscope
Modelscope ms-swift
Vendors & Products Modelscope
Modelscope ms-swift

Fri, 04 Sep 2026 14:45:00 +0000

Type Values Removed Values Added
Description ms-swift 4.5.2 contains a server-side request forgery vulnerability in the swift deploy OpenAI-compatible API that fetches multimodal media URLs without validation or redirect filtering. Unauthenticated attackers can supply arbitrary image_url, audio_url, or video_url parameters to make the server issue requests to internal services and cloud metadata endpoints.
Title ms-swift 4.5.2 Unauthenticated SSRF via Multimodal Media URLs
Weaknesses CWE-918
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Modelscope Ms-swift
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-09-10T15:07:43.973Z

Reserved: 2026-09-04T13:51:42.912Z

Link: CVE-2026-85686

cve-icon Vulnrichment

Updated: 2026-09-10T14:23:00.931Z

cve-icon NVD

Status : Deferred

Published: 2026-09-04T15:17:46.360

Modified: 2026-09-23T17:17:46.620

Link: CVE-2026-85686

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-04T16:00:05Z

Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)