TI-2026-70740 CVE-2026-108850 · GHSA-5j4m-qx6m-86qc
Server-side request forgery in Company Research Agent PDF endpoint
Priority LOW 36
Company Research Agent through 2.2.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests by injecting unescaped ReportLab paragraph markup into the /gen…