Vulnerability details

CVE-2026-85699

jina-ai reader

jina-ai reader server-side request forgery via redirect validation bypass

CVSS 4.0

8.7High

Official description

jina-ai reader contains a server-side request forgery vulnerability where URL validation is performed only on the initial request but not re-applied to subsequent redirect hops. Attackers can craft a public URL that redirects to internal network addresses or cloud metadata endpoints, allowing the server to fetch and return the target's response body to the attacker.

CVSS scores

Score	Version	Source	Vector
8.7High	4.0	CVEProject cvelistV5 (CNA) (VulnCheck)	`CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N`
7.5High	3.1	CVEProject cvelistV5 (CNA) (VulnCheck)	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N`

Affected products

Vendor	Product	Versions	Source
jina-ai	reader	v ≤ 1574bfd380d249c86c82db4dace0d9c8fe17e2b1	CVEProject cvelistV5 (CNA)

References and advisories

https://github.com/jina-ai/reader product
https://github.com/jina-ai/reader/blob/1574bfd380d249c86c82db4dace0d9c8fe17e2b1/src/services/curl.ts technical-description
https://github.com/jina-ai/reader/blob/1574bfd380d249c86c82db4dace0d9c8fe17e2b1/src/services/puppeteer.ts technical-description
https://www.vulncheck.com/advisories/jina-ai-reader-server-side-request-forgery-via-redirect-validation-bypass third-party-advisory
https://github.com/jina-ai/reader/issues/1252 issue-tracking

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-09-04
Last updated: 2026-09-08
State: Published
Assigner (CNA): VulnCheck

Exploit prediction (EPSS)

0.48%

Probability of exploitation in 30 days

41.8%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: Yes
Exploitation: Proof of concept
Technical impact: Partial

Weaknesses (CWE)

CWE-918
Server-Side Request Forgery (SSRF)