by Kastro
Paper/Archive/CVE-2026-56712

CVE-2026-56712

replicate cog — Replicate Cog through 0.23.1 SSRF via cog.File and cog.Path URL Inputs

EPSS 0.4%public exploitCVSS 9.3
critical.is priorityof 100
45
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 34.7.347 × 206.9Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Replicate Cog through 0.23.1 contains a server-side request forgery vulnerability that allows attackers to cause the Cog process to make server-side HTTP requests by submitting prediction inputs with attacker-controlled URLs that are not validated against the resolved destination host or IP before fetching. Attackers can supply malicious URLs or exploit HTTP redirects in cog.File and cog.Path predictor inputs to force requests to internal addresses, potentially exposing sensitive internal services or credentials.

Affected

ProductAffectedFixed inSource
cog≤ 0.23.1–CNA

Scores by source

VulnCheck (CNA)9.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
VulnCheck (CNA)7.8CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:H/SI:L/SA:N
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: partial

References

patchgithub.com/replicate/cog/pull/3225exploitgithub.com/SaiTeja-Erukude/CVE-2026-56712-cog-ssrfwriteupvulncheck.com/advisories/replicate-cog-ssrf-via-cog-file-and-cog-path-url-inputs