Read the docs
TI-2025-40842 Aliases CVE-2025-66405GHSA-hhh5-2cvx-vmfp

Portkey.ai Gateway: Server-Side Request Forgery (SSRF) in Custom Host

Priority LOW 31CWE-918Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
None · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub.

Summary

Portkey.ai Gateway is a blazing fast AI Gateway with integrated guardrails. Prior to 1.14.0, the gateway determined the destination baseURL by prioritizing the value in the x-portkey-custom-host request header. The proxy route then appends the client-specified path to perform an external fetch. This can be maliciously used by users for SSRF attacks. This vulnerability is fixed in 1.14.0.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00397 34th percentileScored 2026-11-07
Fix Fixed gateway (Portkey-AI): 1.14.0@portkey-ai/gateway (npm): 1.14.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Portkey-AIgatewaybefore 1.14.01.14.0Patch availableCNA
—@portkey-ai/gateway (npm)before 1.14.01.14.0Patch availableGHSA-hhh5-2cvx-vmfp
  • gateway VendorPortkey-AI Affected before 1.14.0 Fixed in 1.14.0 Patch available CNA
  • @portkey-ai/gateway (npm) Vendor— Affected before 1.14.0 Fixed in 1.14.0 Patch available GHSA-hhh5-2cvx-vmfp

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:portkey:gateway:*:*:*:*:*:*:*:*before 1.14.0VulnerablePortkey
  • cpe:2.3:a:portkey:gateway:*:*:*:*:*:*:*:* Versions before 1.14.0 Vulnerable ·Portkey

Remediation

  • Fix · CNA gateway (Portkey-AI) Fixed in 1.14.0
  • Fix · GHSA-hhh5-2cvx-vmfp @portkey-ai/gateway (npm) Fixed in 1.14.0 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-66405
  2. 2026-10-03 Alias added: GHSA-hhh5-2cvx-vmfp

References

Patch 1

Advisory 2

Other 2

  • TI-2026-74160 Server-side request forgery in Portkey AI Gateway CVSS 4.0MEDIUM 6.9
  • TI-2026-56735 Portkey AI Gateway Server-Side Request Forgery via /v1/proxy/* CVSS 4.0HIGH 8.7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences