CVE-2026-42339 Details
Description
New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. In versions 0.11.9-alpha.1 and prior, the SSRF protection introduced in v0.9.0.5 (CVE-2025-59146) and hardened in v0.9.6 (CVE-2025-62155) does not block the unspecified address 0.0.0.0. A regular (non-admin) user holding any valid API token can send a multimodal request to /v1/chat/completions, /v1/responses, or /v1/messages with 0.0.0.0 as the image/file URL host, bypassing the private-IP filter and causing the server to issue HTTP requests to localhost. This constitutes at minimum a blind SSRF; when the request is routed through an AWS/Bedrock Claude adaptor, the fetched content is inlined into the model response, upgrading it to a full-read SSRF. At time of publication, there are no publicly available patches.
A server-side request forgery (SSRF) vulnerability has been identified in New API versions through 0.11.9-alpha.1. The issue arises because the SSRF protection, which was introduced in version 0.9.0.5 and strengthened in 0.9.6, fails to block the address 0.0.0.0. This oversight allows regular users with a valid API token to send requests to certain endpoints, bypassing the private-IP filter and causing the server to make HTTP requests to localhost. When the request is processed through an AWS/Bedrock Claude adaptor, the fetched content is integrated into the model response, escalating the vulnerability to a full-read SSRF.
Users are advised to update to a version that addresses this vulnerability. As of now, no patched version is available.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 11, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/QuantumNous/new-api/security/advisories/GHSA-v5c3-6wvc-pc2q | CISA-ADP | ExploitMitigationVendor Advisory |
| https://github.com/QuantumNous/new-api/security/advisories/GHSA-v5c3-6wvc-pc2q | [email protected] | ExploitMitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| newapi new api | < 0.11.9 0.11.9 alpha1 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 24, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 18, 2026 | Initial Analysis | [email protected] |
| May 11, 2026 | CVE Modified | CISA-ADP |
| May 8, 2026 | New CVE Received | [email protected] |