CVE-2026-85675 Details
Description
OWL's DocumentProcessingToolkit contains a server-side request forgery vulnerability in the extract_document_content tool that fetches caller-supplied URLs with no scheme, host, or IP filtering. Attackers can inject malicious URLs through prompt injection to make the server fetch internal resources, with responses returned to the agent context.
A server-side request forgery (SSRF) vulnerability has been identified in OWL's DocumentProcessingToolkit, specifically within the extract_document_content tool. This vulnerability allows the tool to fetch URLs supplied by the caller without any filtering for scheme, host, or IP. As a result, attackers can inject malicious URLs through prompt injection, prompting the server to retrieve internal resources. The fetched responses are then returned to the agent's context, potentially leading to unauthorized access or information disclosure.
To address this vulnerability, it is recommended to implement host-based filtering in the DocumentProcessingToolkit. This should include checks to reject loopback, private, link-local, unique-local, and reserved ranges, as well as cloud-metadata hostnames, before making any requests. Additionally, enforce an HTTP/HTTPS allowlist and disable or re-validate redirects.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 4, 2026CISA-ADP
Assessed Sep 4, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/camel-ai/owl | [email protected] | Vendor |
| https://github.com/camel-ai/owl/blob/fba1dd5b3a9e8cc15f16221bb002cca7e3de2d9d/owl/utils/document_toolkit.py | [email protected] | Source CodeVendor |
| https://github.com/camel-ai/owl/issues/615 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://www.vulncheck.com/advisories/owl-documentprocessingtoolkit-server-side-request-forgery-via-url-fetching | [email protected] | AdvisoryVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| camel-ai OWL | <= fba1dd5b3a9e8cc15f16221bb002cca7e3de2d9d |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 4, 2026 | CVE Modified | CISA-ADP |
| Sep 4, 2026 | New CVE Received | [email protected] |