CVE-2026-85662

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-85662
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-85662.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-85662
Published
2026-09-04T14:32:19.509Z
Modified
2026-09-06T03:47:19.689254938Z
Severity
  • 6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
Marqo 2.26.0 Server-Side Request Forgery via Media URLs
Details

Marqo 2.26.0 contains a server-side request forgery vulnerability in the adddocuments endpoint that allows unauthenticated attackers to trigger requests to arbitrary URLs by supplying malicious media field values. Attackers can exploit downloadimagefromurl and fetchcontentsample functions which lack destination filtering and host validation to access internal services and cloud metadata endpoints.

Database specific 
{
    "cwe_ids": [
        "CWE-918"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85662.json",
    "cna_assigner": "VulnCheck"
}
References

Affected packages

Git / github.com/marqo-ai/marqo

Affected ranges

Type
GIT
Repo
https://github.com/marqo-ai/marqo
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4250358bb51fa2d862308a2f3c893e5afbb71106
Database specific
Show details 
{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.26.0"
        }
    ]
}

Affected versions

0.*
0.0.10
0.0.11
0.0.12
0.0.13
0.0.14
0.0.15
0.0.16
0.0.17
0.0.18
0.0.19
0.0.20
0.0.21
0.0.4
0.0.5
0.0.7
0.0.8
0.0.9
0.1.0
1.*
1.0.0
1.1.0
1.2.0
1.3.0
1.4.0
1.5.0
1.5.1
2.*
2.0.0
2.1.0
2.10.0
2.10.1
2.11.0
2.11.1
2.11.2
2.11.3
2.12.0
2.12.1
2.13.0
2.13.1
2.14.0
2.15.0
2.16.0
2.17.0
2.17.1
2.19.0
2.2.0
2.2.1
2.20.0
2.21.0
2.22.0
2.23.0
2.24.0
2.25.0
2.26.0
2.3.0
2.4.0
2.4.3
2.5.0
2.5.1
2.6.0
2.7.0
2.7.1
2.7.2
2.8.0
2.8.1
2.8.2
2.9.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-85662.json"