CVE-2026-33655

New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 0.12.0-alpha.1, the default SSRF protection configuration did not apply IP filtering to hostnames; with ApplyIPFilterForDomain disabled by default, URL validation checked domain allow/block rules but did not resolve a hostname and validate the resolved IP address, allowing authenticated users to configure Webhook, Bark, or Gotify notification URLs that point at an internal or metadata IP address. This issue is fixed in version 0.12.0-alpha.1.

CVSS v3 7.7 HIGH

7.7^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.1 / Impact : 4.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://github.com/QuantumNous/new-api/commit/20399d3c8fcb4e3649d53163eb11940fd6763743	Patch
https://github.com/QuantumNous/new-api/releases/tag/v0.12.0-alpha.1	Release Notes
https://github.com/QuantumNous/new-api/security/advisories/GHSA-6qcr-qxgr-m7fv	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:newapi:new_api:*:*:*:*:*:*:*:*

History

25 Oct 2026, 15:10

Type	Values Removed	Values Added
Summary		(es) La nueva API es una pasarela de modelo de lenguaje grande (LLM) y un sistema de gestión de activos de inteligencia artificial (IA). Antes de la versión 0.12.0-alpha.1, la configuración predeterminada de protección contra SSRF no aplicaba el filtrado de IP a los nombres de host; con ApplyIPFilterForDomain deshabilitado por defecto, la validación de URL comprobaba las reglas de permitir/bloquear dominios, pero no resolvía un nombre de host ni validaba la dirección IP resuelta, lo que permitía a los usuarios autenticados configurar URL de notificación de Webhook, Bark o Gotify que apuntaban a una dirección IP interna o de metadatos. Este problema está solucionado en la versión 0.12.0-alpha.1.

Information

Published : 2026-07-09 23:17

Updated : 2026-10-25 15:10

NVD link : CVE-2026-33655

Mitre link : CVE-2026-33655

CVE.ORG link : CVE-2026-33655

JSON object : View

Products Affected

newapi

new_api

CWE

CWE-918

Server-Side Request Forgery (SSRF)

{"id": "CVE-2026-33655", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-33655", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-10T14:16:34.619775Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.7, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 4.0, "exploitabilityScore": 3.1}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "QuantumNous", "product": "new-api", "versions": [{"status": "affected", "version": "< 0.12.0-alpha.1"}]}]}], "published": "2026-07-09T23:17:04.763", "references": [{"url": "https://github.com/QuantumNous/new-api/commit/20399d3c8fcb4e3649d53163eb11940fd6763743", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/QuantumNous/new-api/releases/tag/v0.12.0-alpha.1", "tags": ["Release Notes"], "source": "security-advisories@github.com"}, {"url": "https://github.com/QuantumNous/new-api/security/advisories/GHSA-6qcr-qxgr-m7fv", "tags": ["Third Party Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-918"}]}], "descriptions": [{"lang": "en", "value": "New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 0.12.0-alpha.1, the default SSRF protection configuration did not apply IP filtering to hostnames; with ApplyIPFilterForDomain disabled by default, URL validation checked domain allow/block rules but did not resolve a hostname and validate the resolved IP address, allowing authenticated users to configure Webhook, Bark, or Gotify notification URLs that point at an internal or metadata IP address. This issue is fixed in version 0.12.0-alpha.1."}, {"lang": "es", "value": "La nueva API es una pasarela de modelo de lenguaje grande (LLM) y un sistema de gesti\u00f3n de activos de inteligencia artificial (IA). Antes de la versi\u00f3n 0.12.0-alpha.1, la configuraci\u00f3n predeterminada de protecci\u00f3n contra SSRF no aplicaba el filtrado de IP a los nombres de host; con ApplyIPFilterForDomain deshabilitado por defecto, la validaci\u00f3n de URL comprobaba las reglas de permitir/bloquear dominios, pero no resolv\u00eda un nombre de host ni validaba la direcci\u00f3n IP resuelta, lo que permit\u00eda a los usuarios autenticados configurar URL de notificaci\u00f3n de Webhook, Bark o Gotify que apuntaban a una direcci\u00f3n IP interna o de metadatos. Este problema est\u00e1 solucionado en la versi\u00f3n 0.12.0-alpha.1."}], "lastModified": "2026-10-25T15:10:00.147", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:newapi:new_api:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A595535A-9567-45DD-B891-0A8B18D7D574", "versionEndExcluding": "0.12.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}