Vulnerability details

CVE-2026-67346

kyegomez swarms

Swarms 6.8.1 Server-Side Request Forgery via DNS Rebinding Bypass

CVSS 4.0

7.7High

Official description

Swarms through 6.8.1, fixed in commit 8b0fc9e, contains a server-side request forgery vulnerability in the _is_safe_url function that fails to validate hostnames through DNS resolution, allowing attackers to bypass the blocklist. Attackers can supply user-controlled image or audio URLs that resolve to private, loopback, or metadata addresses to reach internal services and exfiltrate credentials.

CVSS scores

Score	Version	Source	Vector
7.7High	4.0	CVEProject cvelistV5 (CNA) (VulnCheck)	`CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N`
8.6High	3.1	CVEProject cvelistV5 (CNA) (VulnCheck)	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N`

Affected products

Vendor	Product	Versions	Source
kyegomez	swarms	v ≤ 6.8.1	CVEProject cvelistV5 (CNA)

References and advisories

https://github.com/kyegomez/swarms/issues/1714 technical-descriptionissue-tracking
https://github.com/kyegomez/swarms/pull/1734 issue-trackingpatch
https://github.com/kyegomez/swarms/commit/8b0fc9e4645603ad94d5fcf4da86e3b9c71f4743 patch
https://www.vulncheck.com/advisories/swarms-server-side-request-forgery-via-dns-rebinding-bypass third-party-advisory

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-07-30
Last updated: 2026-07-31
State: Published
Assigner (CNA): VulnCheck

Exploit prediction (EPSS)

0.5%

Probability of exploitation in 30 days

43.4%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: Yes
Exploitation: None
Technical impact: Partial

Weaknesses (CWE)

CWE-918
Server-Side Request Forgery (SSRF)