CVE-2026-3788

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-3788", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-03-08T07:20:23.877Z", "datePublished": "2026-03-08T23:32:08.523Z", "dateUpdated": "2026-03-10T20:24:19.510Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-03-08T23:32:08.523Z"}, "title": "Bytedesk SpringAIOpenrouterRestController SpringAIOpenrouterRestService.java getModels server-side request forgery", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-918", "lang": "en", "description": "Server-Side Request Forgery"}]}], "affected": [{"vendor": "n/a", "product": "Bytedesk", "versions": [{"version": "1.3.0", "status": "affected"}, {"version": "1.3.1", "status": "affected"}, {"version": "1.3.2", "status": "affected"}, {"version": "1.3.3", "status": "affected"}, {"version": "1.3.4", "status": "affected"}, {"version": "1.3.5", "status": "affected"}, {"version": "1.3.6", "status": "affected"}, {"version": "1.3.7", "status": "affected"}, {"version": "1.3.8", "status": "affected"}, {"version": "1.3.9", "status": "affected"}, {"version": "1.4.5.4", "status": "unaffected"}], "modules": ["SpringAIOpenrouterRestController"]}], "descriptions": [{"lang": "en", "value": "A security vulnerability has been detected in Bytedesk up to 1.3.9. This impacts the function getModels of the file source-code/src/main/java/com/bytedesk/ai/springai/providers/openrouter/SpringAIOpenrouterRestService.java of the component SpringAIOpenrouterRestController. Such manipulation of the argument apiUrl leads to server-side request forgery. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 1.4.5.4 will fix this issue. The name of the patch is 975e39e4dd527596987559f56c5f9f973f64eff7. It is recommended to upgrade the affected component."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 6.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 6.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.5, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C"}}], "timeline": [{"time": "2026-03-08T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-03-08T01:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-03-08T08:25:50.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "ZAST.AI (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/?id.349755", "name": "VDB-349755 | Bytedesk SpringAIOpenrouterRestController SpringAIOpenrouterRestService.java getModels server-side request forgery", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/?ctiid.349755", "name": "VDB-349755 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.768043", "name": "Submit #768043 | Bytedesk <=1.3.9 SSRF", "tags": ["third-party-advisory"]}, {"url": "https://github.com/Bytedesk/bytedesk/issues/20", "tags": ["issue-tracking"]}, {"url": "https://github.com/Bytedesk/bytedesk/issues/20#issuecomment-3976672715", "tags": ["issue-tracking"]}, {"url": "https://github.com/Bytedesk/bytedesk/issues/20#issue-3993526693", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/Bytedesk/bytedesk/commit/975e39e4dd527596987559f56c5f9f973f64eff7", "tags": ["patch"]}, {"url": "https://github.com/Bytedesk/bytedesk/releases/tag/v1.4.5.4", "tags": ["patch"]}, {"url": "https://github.com/Bytedesk/bytedesk/", "tags": ["product"]}], "tags": ["x_open-source"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-10T20:24:11.426508Z", "id": "CVE-2026-3788", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-10T20:24:19.510Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-3788", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-10T20:24:11.426508Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-10T20:24:15.319Z"}}], "cna": {"tags": ["x_open-source"], "title": "Bytedesk SpringAIOpenrouterRestController SpringAIOpenrouterRestService.java getModels server-side request forgery", "credits": [{"lang": "en", "type": "reporter", "value": "ZAST.AI (VulDB User)"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.5, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C"}}], "affected": [{"vendor": "n/a", "modules": ["SpringAIOpenrouterRestController"], "product": "Bytedesk", "versions": [{"status": "affected", "version": "1.3.0"}, {"status": "affected", "version": "1.3.1"}, {"status": "affected", "version": "1.3.2"}, {"status": "affected", "version": "1.3.3"}, {"status": "affected", "version": "1.3.4"}, {"status": "affected", "version": "1.3.5"}, {"status": "affected", "version": "1.3.6"}, {"status": "affected", "version": "1.3.7"}, {"status": "affected", "version": "1.3.8"}, {"status": "affected", "version": "1.3.9"}, {"status": "unaffected", "version": "1.4.5.4"}]}], "timeline": [{"lang": "en", "time": "2026-03-08T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-03-08T01:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-03-08T08:25:50.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/?id.349755", "name": "VDB-349755 | Bytedesk SpringAIOpenrouterRestController SpringAIOpenrouterRestService.java getModels server-side request forgery", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/?ctiid.349755", "name": "VDB-349755 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.768043", "name": "Submit #768043 | Bytedesk <=1.3.9 SSRF", "tags": ["third-party-advisory"]}, {"url": "https://github.com/Bytedesk/bytedesk/issues/20", "tags": ["issue-tracking"]}, {"url": "https://github.com/Bytedesk/bytedesk/issues/20#issuecomment-3976672715", "tags": ["issue-tracking"]}, {"url": "https://github.com/Bytedesk/bytedesk/issues/20#issue-3993526693", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/Bytedesk/bytedesk/commit/975e39e4dd527596987559f56c5f9f973f64eff7", "tags": ["patch"]}, {"url": "https://github.com/Bytedesk/bytedesk/releases/tag/v1.4.5.4", "tags": ["patch"]}, {"url": "https://github.com/Bytedesk/bytedesk/", "tags": ["product"]}], "descriptions": [{"lang": "en", "value": "A security vulnerability has been detected in Bytedesk up to 1.3.9. This impacts the function getModels of the file source-code/src/main/java/com/bytedesk/ai/springai/providers/openrouter/SpringAIOpenrouterRestService.java of the component SpringAIOpenrouterRestController. Such manipulation of the argument apiUrl leads to server-side request forgery. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 1.4.5.4 will fix this issue. The name of the patch is 975e39e4dd527596987559f56c5f9f973f64eff7. It is recommended to upgrade the affected component."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-918", "description": "Server-Side Request Forgery"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-03-08T23:32:08.523Z"}}}, "cveMetadata": {"cveId": "CVE-2026-3788", "state": "PUBLISHED", "dateUpdated": "2026-03-10T20:24:19.510Z", "dateReserved": "2026-03-08T07:20:23.877Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-03-08T23:32:08.523Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"modules": ["SpringAIOpenrouterRestController"], "product": "Bytedesk", "vendor": "n/a", "versions": [{"status": "affected", "version": "1.3.0"}, {"status": "affected", "version": "1.3.1"}, {"status": "affected", "version": "1.3.2"}, {"status": "affected", "version": "1.3.3"}, {"status": "affected", "version": "1.3.4"}, {"status": "affected", "version": "1.3.5"}, {"status": "affected", "version": "1.3.6"}, {"status": "affected", "version": "1.3.7"}, {"status": "affected", "version": "1.3.8"}, {"status": "affected", "version": "1.3.9"}, {"status": "unaffected", "version": "1.4.5.4"}]}], "source": "cna@vuldb.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:bytedesk:bytedesk:*:*:*:*:*:*:*:*", "matchCriteriaId": "171E70D5-44F7-4CC4-8732-E335C1D8F3CC", "versionEndExcluding": "1.4.5.4", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A security vulnerability has been detected in Bytedesk up to 1.3.9. This impacts the function getModels of the file source-code/src/main/java/com/bytedesk/ai/springai/providers/openrouter/SpringAIOpenrouterRestService.java of the component SpringAIOpenrouterRestController. Such manipulation of the argument apiUrl leads to server-side request forgery. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 1.4.5.4 will fix this issue. The name of the patch is 975e39e4dd527596987559f56c5f9f973f64eff7. It is recommended to upgrade the affected component."}, {"lang": "es", "value": "Una vulnerabilidad de seguridad ha sido detectada en Bytedesk hasta la versi\u00f3n 1.3.9. Esto afecta a la funci\u00f3n getModels del archivo source-code/src/main/java/com/bytedesk/ai/springai/providers/openrouter/SpringAIOpenrouterRestService.java del componente SpringAIOpenrouterRestController. Dicha manipulaci\u00f3n del argumento apiUrl conduce a una falsificaci\u00f3n de petici\u00f3n del lado del servidor. El ataque puede ser lanzado remotamente. El exploit ha sido divulgado p\u00fablicamente y puede ser utilizado. La actualizaci\u00f3n a la versi\u00f3n 1.4.5.4 solucionar\u00e1 este problema. El nombre del parche es 975e39e4dd527596987559f56c5f9f973f64eff7. Se recomienda actualizar el componente afectado."}], "id": "CVE-2026-3788", "lastModified": "2026-06-17T10:44:13.487", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.4, "source": "cna@vuldb.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 2.1, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-3788", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-10T20:24:11.426508Z", "version": "2.0.3"}}]}, "published": "2026-03-09T00:16:01.247", "references": [{"source": "cna@vuldb.com", "tags": ["Product"], "url": "https://github.com/Bytedesk/bytedesk/"}, {"source": "cna@vuldb.com", "tags": ["Patch"], "url": "https://github.com/Bytedesk/bytedesk/commit/975e39e4dd527596987559f56c5f9f973f64eff7"}, {"source": "cna@vuldb.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/Bytedesk/bytedesk/issues/20"}, {"source": "cna@vuldb.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/Bytedesk/bytedesk/issues/20#issue-3993526693"}, {"source": "cna@vuldb.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/Bytedesk/bytedesk/issues/20#issuecomment-3976672715"}, {"source": "cna@vuldb.com", "tags": ["Release Notes"], "url": "https://github.com/Bytedesk/bytedesk/releases/tag/v1.4.5.4"}, {"source": "cna@vuldb.com", "tags": ["Permissions Required", "VDB Entry"], "url": "https://vuldb.com/?ctiid.349755"}, {"source": "cna@vuldb.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://vuldb.com/?id.349755"}, {"source": "cna@vuldb.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://vuldb.com/?submit.768043"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-918"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.3.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.3.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.3.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.3.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.3.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.3.5"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.3.6"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.3.7"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.3.8"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.3.9"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "1.4.5.4"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}]}, "original": {"product": "Bytedesk", "source": "cna", "vendor": "n/a"}, "product": "bytedesk", "vendor": "bytedesk"}], "analysis": {"en": {"generated_at": "2026-04-16T04:04:31.371690+00:00", "value": {"mitigation_remediation": ["Update Bytedesk to v1.4.5.4 or later, which patches the SSRF flaw.", "If upgrading immediately is not possible, restrict the Bytedesk service\u2019s outbound network traffic to a whitelist of trusted domains or approved addresses, preventing unauthorized external requests.", "Implement input validation for the apiUrl parameter so that only allowed schemes (such as https) and approved hostnames are accepted, thereby blocking malformed or dangerous URLs."], "summary": {"action": "Patch", "impact": "Server\u2011side request forgery via manipulated apiUrl"}, "threat_synthesis": {"affected_systems": "Users running Bytedesk versions 1.3.9 or earlier are affected. The vulnerability was discovered in the component SpringAIOpenrouterRestController, and an update to version 1.4.5.4 contains the fix. No other vendors or products are listed; the issue is specific to the Bytedesk application.", "description_and_impact": "A server\u2011side request forgery (SSRF) vulnerability exists in Bytedesk in the getModels function of SpringAIOpenrouterRestService, allowing attackers to manipulate the apiUrl argument to instruct the server to make arbitrary outbound HTTP requests. This flaw can lead to exposure of internal resources, data leakage, or further lateral movement within the network. The weakness aligns with CWE\u2011918, and the impact is confined to the integrity and confidentiality of information accessed by the server.", "risk_and_exploitability": "The CVSS score of 5.3 denotes moderate severity, and the EPSS score indicates a very low probability of exploitation. Because the flaw can be triggered remotely via crafted input, attackers could leverage it if the application is exposed to untrusted users. The vulnerability is not catalogued in the CISA KEV list, and no publicly released exploit code is confirmed; however, the remote nature and input manipulation suggest that an attacker with network access to the application could exploit the flaw if the server is not properly restricted."}}}}, "created": "2026-03-09T10:02:38.766994+00:00", "updated": "2026-04-16T04:15:24.075120+00:00", "vendors": ["bytedesk", "bytedesk$PRODUCT$bytedesk"]}