TI-2026-75069 CVE-2026-111321Server-side request forgery in TaskingAI ActionsPriority LOW 23TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send arbitrary HTTP requests by supplying an unvalidated OpenAPI servers[0].url in a us…CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00223 · Published 2026-10-15 · No fix listed CWE-918