Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2026-111385 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

Nezha from 2.1.0 before 2.3.15 contains a host header injection vulnerability in mintTransferTool that builds fs.download_url and fs.upload_url transfer URLs from the unvalidated Host header. Attackers who control the Host header seen on a victim's MCP request can redirect file uploads or capture one-time download tokens and replay them to exfiltrate files.

Metrics

CVSS 3.x Severity and Vector Strings:

VolerionCVSS-B:6.5 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CNA: [email protected]CVSS-B:4.8 MEDIUMVector:CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://github.com/nezhahq/nezha/security/advisories/GHSA-rj3w-jrj7-x7c3	CISA-ADP	AdvisoryRemedyTechnical AnalysisVendor
https://github.com/nezhahq/nezha/commit/36b742a7e9a81ed782363dd19efd77b7030fbd0f	[email protected]	Source CodeVendor
https://github.com/nezhahq/nezha/commit/c726930833937a0aebb2a924064f236faea889f6	[email protected]	Source CodeVendor
https://github.com/nezhahq/nezha/security/advisories/GHSA-rj3w-jrj7-x7c3	[email protected]	AdvisoryRemedyTechnical AnalysisVendor
https://www.vulncheck.com/advisories/nezha-2.1.0-before-2.3.15-host-header-injection-via-mcp-transfer-tools	[email protected]	AdvisoryRemedy

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-601	URL Redirection to Untrusted Site ('Open Redirect')	[email protected]

Affected Products

Product	Versions
Nezha	>= 2.1.0, < 2.3.15 (semver)
CPE No CPEs found in CPE dictionary for this product. Remediation Upgrade: 2.3.15moderate efforthttps://github.com/nezhahq/nezha/releases/tag/v2.3.15 Workaround:low effort Disable MCP by setting `enable_mcp: false`. This is the default setting. Mitigation:low effort If MCP must remain enabled, terminate all inbound traffic at a reverse proxy that rewrites `Host` to a fixed operator-controlled value before it reaches the dashboard, and reject requests whose original `Host` is not in an operator-maintained allowlist. Also strip or override `X-Forwarded-Proto` at that boundary so that the scheme in the returned URL is deterministic. Mitigation:low effort Bind the dashboard listener to a loopback address (`ListenHost: 127.0.0.1` or `localhost`) when running behind a same-host reverse proxy. This activates the DNS-rebinding branch in `mcpOriginGuard` for browser-originated requests, though it does not by itself constrain the `Host` header on non-browser MCP client requests.

Product

Versions

Nezha

>= 2.1.0, < 2.3.15 (semver)

CPE

No CPEs found in CPE dictionary for this product.

Remediation

Upgrade: 2.3.15moderate efforthttps://github.com/nezhahq/nezha/releases/tag/v2.3.15
Workaround:low effort
Disable MCP by setting `enable_mcp: false`. This is the default setting.
Mitigation:low effort
If MCP must remain enabled, terminate all inbound traffic at a reverse proxy that rewrites `Host` to a fixed operator-controlled value before it reaches the dashboard, and reject requests whose original `Host` is not in an operator-maintained allowlist. Also strip or override `X-Forwarded-Proto` at that boundary so that the scheme in the returned URL is deterministic.
Mitigation:low effort
Bind the dashboard listener to a loopback address (`ListenHost: 127.0.0.1` or `localhost`) when running behind a same-host reverse proxy. This activates the DNS-rebinding branch in `mcpOriginGuard` for browser-originated requests, though it does not by itself constrain the `Host` header on non-browser MCP client requests.

Change History

2 change records found show changes

Date	Action	Recorded By
Oct 21, 2026	CVE Modified	CISA-ADP
Oct 16, 2026	New CVE Received	[email protected]