CVE-2026-40072

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-40072", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-04-09T00:39:12.204Z", "datePublished": "2026-04-09T17:41:14.920Z", "dateUpdated": "2026-04-09T19:37:07.730Z"}, "containers": {"cna": {"title": "web3.py affected by SSRF via CCIP Read (EIP-3668) OffchainLookup URL handling", "problemTypes": [{"descriptions": [{"cweId": "CWE-918", "lang": "en", "description": "CWE-918: Server-Side Request Forgery (SSRF)", "type": "CWE"}]}], "metrics": [{"cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "LOW", "subAvailabilityImpact": "NONE", "baseScore": 1.7, "baseSeverity": "LOW", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U", "version": "4.0"}}], "references": [{"name": "https://github.com/ethereum/web3.py/security/advisories/GHSA-5hr4-253g-cpx2", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/ethereum/web3.py/security/advisories/GHSA-5hr4-253g-cpx2"}, {"name": "https://github.com/ethereum/web3.py/commit/b1c57bb0a124359c9902daaefab4d8af7c3c4c1e", "tags": ["x_refsource_MISC"], "url": "https://github.com/ethereum/web3.py/commit/b1c57bb0a124359c9902daaefab4d8af7c3c4c1e"}], "affected": [{"vendor": "ethereum", "product": "web3.py", "versions": [{"version": ">= 6.0.0b3, < 7.15.0", "status": "affected"}, {"version": ">= 8.0.0b1, < 8.0.0b2", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-04-09T17:41:14.920Z"}, "descriptions": [{"lang": "en", "value": "web3.py allows you to interact with the Ethereum blockchain using Python. From 6.0.0b3 to before 7.15.0 and 8.0.0b2, web3.py implements CCIP Read / OffchainLookup (EIP-3668) by performing HTTP requests to URLs supplied by smart contracts in offchain_lookup_payload[\"urls\"]. The implementation uses these contract-supplied URLs directly (after {sender} / {data} template substitution) without any destination validation. CCIP Read is enabled by default (global_ccip_read_enabled = True on all providers), meaning any application using web3.py's .call() method is exposed without explicit opt-in. This results in Server-Side Request Forgery (SSRF) when web3.py is used in backend services, indexers, APIs, or any environment that performs eth_call / .call() against untrusted or user-supplied contract addresses. A malicious contract can force the web3.py process to issue HTTP requests to arbitrary destinations, including internal network services and cloud metadata endpoints. This vulnerability is fixed in 7.15.0 and 8.0.0b2."}], "source": {"advisory": "GHSA-5hr4-253g-cpx2", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-09T19:36:55.666029Z", "id": "CVE-2026-40072", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-09T19:37:07.730Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-40072", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-04-09T00:39:12.204Z", "datePublished": "2026-04-09T17:41:14.920Z", "dateUpdated": "2026-04-09T19:37:07.730Z"}, "containers": {"cna": {"title": "web3.py affected by SSRF via CCIP Read (EIP-3668) OffchainLookup URL handling", "problemTypes": [{"descriptions": [{"cweId": "CWE-918", "lang": "en", "description": "CWE-918: Server-Side Request Forgery (SSRF)", "type": "CWE"}]}], "metrics": [{"cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "LOW", "subAvailabilityImpact": "NONE", "baseScore": 1.7, "baseSeverity": "LOW", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U", "version": "4.0"}}], "references": [{"name": "https://github.com/ethereum/web3.py/security/advisories/GHSA-5hr4-253g-cpx2", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/ethereum/web3.py/security/advisories/GHSA-5hr4-253g-cpx2"}, {"name": "https://github.com/ethereum/web3.py/commit/b1c57bb0a124359c9902daaefab4d8af7c3c4c1e", "tags": ["x_refsource_MISC"], "url": "https://github.com/ethereum/web3.py/commit/b1c57bb0a124359c9902daaefab4d8af7c3c4c1e"}], "affected": [{"vendor": "ethereum", "product": "web3.py", "versions": [{"version": ">= 6.0.0b3, < 7.15.0", "status": "affected"}, {"version": ">= 8.0.0b1, < 8.0.0b2", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-04-09T17:41:14.920Z"}, "descriptions": [{"lang": "en", "value": "web3.py allows you to interact with the Ethereum blockchain using Python. From 6.0.0b3 to before 7.15.0 and 8.0.0b2, web3.py implements CCIP Read / OffchainLookup (EIP-3668) by performing HTTP requests to URLs supplied by smart contracts in offchain_lookup_payload[\"urls\"]. The implementation uses these contract-supplied URLs directly (after {sender} / {data} template substitution) without any destination validation. CCIP Read is enabled by default (global_ccip_read_enabled = True on all providers), meaning any application using web3.py's .call() method is exposed without explicit opt-in. This results in Server-Side Request Forgery (SSRF) when web3.py is used in backend services, indexers, APIs, or any environment that performs eth_call / .call() against untrusted or user-supplied contract addresses. A malicious contract can force the web3.py process to issue HTTP requests to arbitrary destinations, including internal network services and cloud metadata endpoints. This vulnerability is fixed in 7.15.0 and 8.0.0b2."}], "source": {"advisory": "GHSA-5hr4-253g-cpx2", "discovery": "UNKNOWN"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-40072", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-09T19:36:55.666029Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-09T19:37:01.401Z"}}]}}

{"affected": [{"affectedData": [{"product": "web3.py", "vendor": "ethereum", "versions": [{"status": "affected", "version": ">= 6.0.0b3, < 7.15.0"}, {"status": "affected", "version": ">= 8.0.0b1, < 8.0.0b2"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:apeworx:web3.py:*:*:*:*:*:python:*:*", "matchCriteriaId": "21C388F4-12FA-49A6-A82F-82F2B596B8F6", "versionEndExcluding": "7.15.0", "versionStartIncluding": "6.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:apeworx:web3.py:6.0.0:-:*:*:*:python:*:*", "matchCriteriaId": "4F57B105-4085-4270-AB48-87888BFDA980", "vulnerable": true}, {"criteria": "cpe:2.3:a:apeworx:web3.py:6.0.0:beta10:*:*:*:python:*:*", "matchCriteriaId": "800E433F-EAF1-4E68-8A8C-CB04AEAFA9CC", "vulnerable": true}, {"criteria": "cpe:2.3:a:apeworx:web3.py:6.0.0:beta11:*:*:*:python:*:*", "matchCriteriaId": "9D617EE7-6666-47E7-BACD-64960873E377", "vulnerable": true}, {"criteria": "cpe:2.3:a:apeworx:web3.py:6.0.0:beta3:*:*:*:python:*:*", "matchCriteriaId": "DF87D8C3-542F-48D8-86BE-7F9A140BA02E", "vulnerable": true}, {"criteria": "cpe:2.3:a:apeworx:web3.py:6.0.0:beta4:*:*:*:python:*:*", "matchCriteriaId": "AF9B94BD-8748-474A-BFD2-CE0FC6C86AB4", "vulnerable": true}, {"criteria": "cpe:2.3:a:apeworx:web3.py:6.0.0:beta5:*:*:*:python:*:*", "matchCriteriaId": "07094081-F344-488D-9D0F-679E8F1C5060", "vulnerable": true}, {"criteria": "cpe:2.3:a:apeworx:web3.py:6.0.0:beta6:*:*:*:python:*:*", "matchCriteriaId": "1B25F26C-D637-44E6-ACFC-8B31B61C1C77", "vulnerable": true}, {"criteria": "cpe:2.3:a:apeworx:web3.py:6.0.0:beta7:*:*:*:python:*:*", "matchCriteriaId": "D0B35286-37D3-4353-A858-79304A453EC1", "vulnerable": true}, {"criteria": "cpe:2.3:a:apeworx:web3.py:6.0.0:beta8:*:*:*:python:*:*", "matchCriteriaId": "E5A3F6FD-A489-4877-A8D8-CD90B48448B8", "vulnerable": true}, {"criteria": "cpe:2.3:a:apeworx:web3.py:6.0.0:beta9:*:*:*:python:*:*", "matchCriteriaId": "BE5801C7-419F-4FC1-8071-D3710B77A2C3", "vulnerable": true}, {"criteria": "cpe:2.3:a:apeworx:web3.py:8.0.0:beta1:*:*:*:python:*:*", "matchCriteriaId": "66813562-1068-4639-A179-E753E1DE90CD", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "web3.py allows you to interact with the Ethereum blockchain using Python. From 6.0.0b3 to before 7.15.0 and 8.0.0b2, web3.py implements CCIP Read / OffchainLookup (EIP-3668) by performing HTTP requests to URLs supplied by smart contracts in offchain_lookup_payload[\"urls\"]. The implementation uses these contract-supplied URLs directly (after {sender} / {data} template substitution) without any destination validation. CCIP Read is enabled by default (global_ccip_read_enabled = True on all providers), meaning any application using web3.py's .call() method is exposed without explicit opt-in. This results in Server-Side Request Forgery (SSRF) when web3.py is used in backend services, indexers, APIs, or any environment that performs eth_call / .call() against untrusted or user-supplied contract addresses. A malicious contract can force the web3.py process to issue HTTP requests to arbitrary destinations, including internal network services and cloud metadata endpoints. This vulnerability is fixed in 7.15.0 and 8.0.0b2."}, {"lang": "es", "value": "web3.py le permite interactuar con la cadena de bloques de Ethereum usando Python. Desde 6.0.0b3 hasta antes de 7.15.0 y 8.0.0b2, web3.py implementa CCIP Read / OffchainLookup (EIP-3668) realizando peticiones HTTP a URLs proporcionadas por contratos inteligentes en offchain_lookup_payload[\u2019urls\u2019]. La implementaci\u00f3n utiliza estas URLs proporcionadas por el contrato directamente (despu\u00e9s de la sustituci\u00f3n de la plantilla {sender} / {data}) sin ninguna validaci\u00f3n de destino. CCIP Read est\u00e1 habilitado por defecto (global_ccip_read_enabled = True en todos los proveedores), lo que significa que cualquier aplicaci\u00f3n que utilice el m\u00e9todo .call() de web3.py est\u00e1 expuesta sin una aceptaci\u00f3n expl\u00edcita. Esto resulta en Falsificaci\u00f3n de Petici\u00f3n del Lado del Servidor (SSRF) cuando web3.py se utiliza en servicios de backend, indexadores, APIs, o cualquier entorno que realice eth_call / .call() contra direcciones de contrato no confiables o proporcionadas por el usuario. Un contrato malicioso puede forzar al proceso de web3.py a emitir peticiones HTTP a destinos arbitrarios, incluyendo servicios de red internos y puntos finales de metadatos en la nube. Esta vulnerabilidad est\u00e1 corregida en 7.15.0 y 8.0.0b2."}], "id": "CVE-2026-40072", "lastModified": "2026-10-26T22:10:00.163", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 1.7, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "UNREPORTED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "LOW", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-40072", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-09T19:36:55.666029Z", "version": "2.0.3"}}]}, "published": "2026-04-09T18:17:03.510", "references": [{"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/ethereum/web3.py/commit/b1c57bb0a124359c9902daaefab4d8af7c3c4c1e"}, {"source": "security-advisories@github.com", "tags": ["Exploit", "Mitigation", "Vendor Advisory"], "url": "https://github.com/ethereum/web3.py/security/advisories/GHSA-5hr4-253g-cpx2"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-918"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[6.0.0b3,7.15.0)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[8.0.0b1,8.0.0b2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "web3.py", "source": "cna", "vendor": "ethereum"}, "product": "web3.py", "vendor": "ethereum"}], "analysis": {"en": {"generated_at": "2026-04-09T19:21:46.864155+00:00", "value": {"mitigation_remediation": ["Upgrade web3.py to version 7.15.0 or 8.0.0b2 to apply the vendor fix.", "If upgrading is not immediately possible, disable global CCIP Read by setting global_ccip_read_enabled=False or configuring the provider to forbid offchain lookup.", "Avoid calling .call() on contracts whose source is not trusted or that could return an offchain_lookup_payload.", "Monitor outbound HTTP traffic from backend services for unexpected or suspicious requests to internal or cloud metadata endpoints."], "summary": {"action": "Apply Patch", "impact": "Server\u2011Side Request Forgery (SSRF)"}, "threat_synthesis": {"affected_systems": "The affected library is Ethereum\u2019s web3.py. Versions starting with 6.0.0b3 up to but excluding 7.15.0 and including 8.0.0b2 are vulnerable. All providers have CCIP Read enabled by default, so any application that uses .call() with untrusted or user\u2011supplied contract addresses is at risk.", "description_and_impact": "The vulnerability stems from web3.py\u2019s handling of the CCIP Read/OffchainLookup mechanism as defined by EIP\u20113668. The library performs HTTP requests to URLs supplied by a smart contract without validating the destination, allowing an attacker to supply arbitrary URLs. This missing validation results in a Server\u2011Side Request Forgery that can be leveraged from any backend process that uses the library\u2019s .call() method. The flaw can expose internal network resources or cloud metadata services to attackers through the library.", "risk_and_exploitability": "The CVSS score of 1.7 indicates a low\u2011severity flaw, and no EPSS information is available; the vulnerability is not listed in the CISA KEV catalog. The likely attack path involves a malicious smart contract returning an offchain_lookup_payload containing crafted URLs, causing a backend service running web3.py to issue requests to arbitrary endpoints. Because the library performs the calls automatically, no additional user interaction is required other than the execution of .call() against the contract. The lack of destination validation makes exploitation straightforward for an attacker who can control the contract data."}}}}, "created": "2026-04-10T08:52:42.399286+00:00", "updated": "2026-04-10T09:31:52.371504+00:00", "vendors": ["ethereum", "ethereum$PRODUCT$web3.py"]}