cyfenced.com →

[ CVE-2026-113671 · Published 20 Oct 2026 ]

ApostropheCMS: Host header controls server-side image fetch origin in @apostrophecms/ai-helper, enabling authenticated SSRF

CVSS 4.3 EPSS <1%Fix available

[ Why it matters ]Priority signals

  • Public proof-of-concept exploit exists (CISA SSVC)

[ Description ]Official description

ApostropheCMS is an open-source Node.js content management system. From 1.0.0-beta.10 until 1.0.0-beta.13 of the AI helper, an editor with image-generation capability can create a base64-generated image record without a stored provider URL and invoke image acceptance on a deployment using local relative storage with no trusted global base URL. The server resolves the fixed uploads path against a request-controlled Host-derived origin, enabling bounded server-side requests to an attacker-selected host, port, and HTTP origin, but not arbitrary-path retrieval or the stored-provider and absolute-storage configurations. This issue is fixed in AI helper 1.0.0-beta.13.

[ Fixes ]Fixes and patches

  • @apostrophecms/ai-helper 1.0.0-beta.13Fixed version · GitHub Advisories · npm package @apostrophecms/ai-helper: upgrade to 1.0.0-beta.13 or later (affected >= 1.0.0-beta.10, < 1.0.0-beta.13)

[ Packages ]Affected open-source packages

  • @apostrophecms/ai-helper npmAffected >= 1.0.0-beta.10, < 1.0.0-beta.13 · fixed in 1.0.0-beta.13 · GHSA-527g-ff96-x6wj

[ References ]References