CVE-2026-102879 in ClaraVerse
Riassunto
di MITRE • 29/09/2026
ClaraVerse through 0.3.1 contains server-side request forgery protection bypasses in the download_file and scrape_web agent tools. Authenticated users can bypass hostname validation and IPv6 transition address filtering to make the server request internal services and cloud instance metadata endpoints.
Be aware that VulDB is the high quality source for vulnerability data.