CVE-2026-63731

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-63731

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-63731.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-63731

Published

2026-07-20T18:45:14.088Z

Modified

2026-07-21T03:45:42.889075664Z

Severity

6.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N CVSS Calculator

Summary

HyperDX < 2.31.0 SSRF via ClickHouse Proxy Test Endpoint

Details

HyperDX before 2.31.0 contains a server-side request forgery vulnerability that allows authenticated team members to direct the server to arbitrary internal destinations by supplying a caller-controlled host parameter to the ClickHouse proxy test endpoint with no URL validation or allowlist enforcement. Attackers can exploit the reflected error responses from the endpoint to disclose internal service response bodies, enabling access to internal APIs, container services, and cloud provider metadata endpoints.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63731.json",
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-918"
    ]
}

References

Affected packages

Git / github.com/hyperdxio/hyperdx

Affected ranges

Type

GIT

Repo

https://github.com/hyperdxio/hyperdx

Events

Introduced

c26ee9164aabbb6aad487f8cf4ee3efb1546a535

Fixed

4b1aefbae22ac02bffbdf7fca932f43095d3d8d6

Database specific

{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "2.0.0"
        },
        {
            "fixed": "2.31.0"
        }
    ]
}

Affected versions

@hyperdx/api@2.*

@hyperdx/api@2.0.0

@hyperdx/api@2.0.1

@hyperdx/api@2.0.2

@hyperdx/api@2.0.3

@hyperdx/api@2.0.4

@hyperdx/api@2.0.5

@hyperdx/api@2.0.6

@hyperdx/api@2.1.0

@hyperdx/api@2.1.1

@hyperdx/api@2.1.2

@hyperdx/api@2.10.0

@hyperdx/api@2.11.0

@hyperdx/api@2.12.0

@hyperdx/api@2.13.0

@hyperdx/api@2.14.0

@hyperdx/api@2.15.0

@hyperdx/api@2.15.1

@hyperdx/api@2.16.0

@hyperdx/api@2.17.0

@hyperdx/api@2.18.0

@hyperdx/api@2.19.0

@hyperdx/api@2.2.0

@hyperdx/api@2.2.1

@hyperdx/api@2.2.2

@hyperdx/api@2.20.0

@hyperdx/api@2.21.0

@hyperdx/api@2.22.0

@hyperdx/api@2.22.1

@hyperdx/api@2.23.0

@hyperdx/api@2.23.1

@hyperdx/api@2.24.1

@hyperdx/api@2.27.0

@hyperdx/api@2.28.0

@hyperdx/api@2.29.0

@hyperdx/api@2.3.0

@hyperdx/api@2.30.0

@hyperdx/api@2.30.1

@hyperdx/api@2.4.0

@hyperdx/api@2.5.0

@hyperdx/api@2.6.0

@hyperdx/api@2.7.0

@hyperdx/api@2.7.1

@hyperdx/api@2.8.0

@hyperdx/api@2.9.0

@hyperdx/app@2.*

@hyperdx/app@2.0.0

@hyperdx/app@2.0.1

@hyperdx/app@2.0.2

@hyperdx/app@2.0.3

@hyperdx/app@2.0.4

@hyperdx/app@2.0.5

@hyperdx/app@2.0.6

@hyperdx/app@2.1.0

@hyperdx/app@2.1.1

@hyperdx/app@2.1.2

@hyperdx/app@2.10.0

@hyperdx/app@2.11.0

@hyperdx/app@2.12.0

@hyperdx/app@2.13.0

@hyperdx/app@2.14.0

@hyperdx/app@2.15.0

@hyperdx/app@2.15.1

@hyperdx/app@2.16.0

@hyperdx/app@2.17.0

@hyperdx/app@2.18.0

@hyperdx/app@2.19.0

@hyperdx/app@2.2.0

@hyperdx/app@2.2.1

@hyperdx/app@2.2.2

@hyperdx/app@2.20.0

@hyperdx/app@2.21.0

@hyperdx/app@2.22.0

@hyperdx/app@2.22.1

@hyperdx/app@2.23.0

@hyperdx/app@2.23.1

@hyperdx/app@2.24.1

@hyperdx/app@2.27.0

@hyperdx/app@2.28.0

@hyperdx/app@2.29.0

@hyperdx/app@2.3.0

@hyperdx/app@2.30.0

@hyperdx/app@2.30.1

@hyperdx/app@2.4.0

@hyperdx/app@2.5.0

@hyperdx/app@2.6.0

@hyperdx/app@2.7.0

@hyperdx/app@2.7.1

@hyperdx/app@2.8.0

@hyperdx/app@2.9.0

@hyperdx/cli@0.*

@hyperdx/cli@0.2.0

@hyperdx/cli@0.4.0

@hyperdx/cli@0.4.1

@hyperdx/cli@0.5.0

@hyperdx/cli@0.5.1

@hyperdx/cli@0.5.2

@hyperdx/common-utils@0.*

@hyperdx/common-utils@0.10.0

@hyperdx/common-utils@0.10.1

@hyperdx/common-utils@0.10.2

@hyperdx/common-utils@0.11.0

@hyperdx/common-utils@0.11.1

@hyperdx/common-utils@0.12.0

@hyperdx/common-utils@0.12.1

@hyperdx/common-utils@0.12.2

@hyperdx/common-utils@0.12.3

@hyperdx/common-utils@0.13.0

@hyperdx/common-utils@0.14.0

@hyperdx/common-utils@0.15.0

@hyperdx/common-utils@0.16.0

@hyperdx/common-utils@0.16.1

@hyperdx/common-utils@0.16.2

@hyperdx/common-utils@0.17.0

@hyperdx/common-utils@0.17.1

@hyperdx/common-utils@0.18.1

@hyperdx/common-utils@0.19.1

@hyperdx/common-utils@0.2.0

@hyperdx/common-utils@0.2.1

@hyperdx/common-utils@0.2.2

@hyperdx/common-utils@0.2.3

@hyperdx/common-utils@0.2.4

@hyperdx/common-utils@0.2.5

@hyperdx/common-utils@0.2.6

@hyperdx/common-utils@0.2.7

@hyperdx/common-utils@0.2.8

@hyperdx/common-utils@0.2.9

@hyperdx/common-utils@0.20.0

@hyperdx/common-utils@0.21.0

@hyperdx/common-utils@0.22.0

@hyperdx/common-utils@0.3.0

@hyperdx/common-utils@0.3.1

@hyperdx/common-utils@0.3.2

@hyperdx/common-utils@0.4.0

@hyperdx/common-utils@0.5.0

@hyperdx/common-utils@0.6.0

@hyperdx/common-utils@0.7.0

@hyperdx/common-utils@0.7.1

@hyperdx/common-utils@0.7.2

@hyperdx/common-utils@0.8.0

@hyperdx/common-utils@0.9.0

@hyperdx/hdx-eval@0.*

@hyperdx/hdx-eval@0.2.0

@hyperdx/hdx-eval@0.2.1

@hyperdx/otel-collector@2.*

@hyperdx/otel-collector@2.14.0

@hyperdx/otel-collector@2.15.0

@hyperdx/otel-collector@2.15.1

@hyperdx/otel-collector@2.16.0

@hyperdx/otel-collector@2.17.0

@hyperdx/otel-collector@2.18.0

@hyperdx/otel-collector@2.19.0

@hyperdx/otel-collector@2.20.0

@hyperdx/otel-collector@2.21.0

@hyperdx/otel-collector@2.22.0

@hyperdx/otel-collector@2.22.1

@hyperdx/otel-collector@2.23.0

@hyperdx/otel-collector@2.23.1

@hyperdx/otel-collector@2.24.1

@hyperdx/otel-collector@2.27.0

@hyperdx/otel-collector@2.28.0

@hyperdx/otel-collector@2.29.0

@hyperdx/otel-collector@2.30.0

@hyperdx/otel-collector@2.30.1

cli-v0.*

cli-v0.2.1

cli-v0.3.0

cli-v0.4.0

cli-v0.4.1

cli-v0.5.0

cli-v0.5.1

cli-v0.5.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-63731.json"