CVE-2026-2558

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-2558

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-2558.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-2558

Published

2026-02-16T13:32:05Z

Modified

2026-08-12T03:51:46Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

GeekAI net_handler.go Download server-side request forgery

Details

A flaw has been found in GeekAI up to 4.2.4. The affected element is the function Download of the file api/handler/net_handler.go. This manipulation of the argument url causes server-side request forgery. Remote exploitation of the attack is possible. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Database specific

{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-918"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/2xxx/CVE-2026-2558.json"
}

References

Affected packages

Git / github.com/yangjian102621/geekai

Affected ranges

Type

GIT

Repo

https://github.com/yangjian102621/geekai

Events

Introduced

dd675c9a9bfad67ff88b7e4b643f2d2c66bee194

Last Affected

598f6c48fb3fb4dab0f8c97a0af044f6f90a8b45

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "4.2.0"
        },
        {
            "last_affected": "4.2.0"
        },
        {
            "introduced": "4.2.1"
        },
        {
            "last_affected": "4.2.1"
        },
        {
            "introduced": "4.2.2"
        },
        {
            "last_affected": "4.2.2"
        },
        {
            "introduced": "4.2.3"
        },
        {
            "last_affected": "4.2.3"
        },
        {
            "introduced": "4.2.4"
        },
        {
            "last_affected": "4.2.4"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

4.*

4.2.0

4.2.1

4.2.2

4.2.3

4.2.4

v4.*

v4.2.0

v4.2.2

v4.2.4

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-2558.json"