Read the docs
TI-2026-23661 Aliases CVE-2026-30832GHSA-3fvx-xrxq-8jvv

Soft Serve: SSRF via unvalidated LFS endpoint in repo import

Priority HIGH 72CWE-918Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · Low · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub.

Summary

Soft Serve is a self-hostable Git server for the command line. From version 0.6.0 to before version 0.11.4, an authenticated SSH user can force the server to make HTTP requests to internal/private IP addresses by running repo import with a crafted --lfs-endpoint URL. The initial batch request is blind (the response from a metadata endpoint won't parse as valid LFS JSON), but an attacker hosting a fake LFS server can chain this into full read access to internal services by returning download URLs that point at internal targets. This issue has been patched in version 0.11.4.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00365 30th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed soft-serve (charmbracelet): 0.11.4github.com/charmbracelet/soft-serve (Go): 0.11.4

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
charmbraceletsoft-serve0.6.0 to before 0.11.40.11.4Patch availableCNA
—github.com/charmbracelet/soft-serve (Go)0.6.0 to before 0.11.40.11.4Patch availableGHSA-3fvx-xrxq-8jvv
  • soft-serve Vendorcharmbracelet Affected 0.6.0 to before 0.11.4 Fixed in 0.11.4 Patch available CNA
  • github.com/charmbracelet/soft-serve (Go) Vendor— Affected 0.6.0 to before 0.11.4 Fixed in 0.11.4 Patch available GHSA-3fvx-xrxq-8jvv

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:charm:soft_serve:*:*:*:*:*:go:*:*0.6.0 to before 0.11.4Vulnerablecharmbracelet
  • cpe:2.3:a:charm:soft_serve:*:*:*:*:*:go:*:* Versions 0.6.0 to before 0.11.4 Vulnerable ·charmbracelet

Remediation

  • Fix · CNA soft-serve (charmbracelet) Fixed in 0.11.4
  • Fix · GHSA-3fvx-xrxq-8jvv github.com/charmbracelet/soft-serve (Go) Fixed in 0.11.4 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-30832
  2. 2026-10-03 Alias added: GHSA-3fvx-xrxq-8jvv

References

Exploit 1

Patch 1

Advisory 1

Other 2

  • TI-2025-39912 Soft Serve is vulnerable to SSRF through its Webhooks CVSS 3.1CRITICAL 9.1
  • TI-2023-23497 Soft Serve Public Key Authentication Bypass Vulnerability when Keyboard-Interactive SSH Authentication is Enabled CVSS 3.1HIGH 7.5
  • TI-2026-25759 Soft Serve: Authenticated repo import can clone server-local private repositories CVSS 4.0HIGH 7.1
  • TI-2026-17863 Soft Serve is missing an authorization check in LFS lock deletion CVSS 3.1MEDIUM 5.4
  • TI-2026-19385 Soft Serve has Critical Authentication Bypass CVSS 4.0HIGH 8.1
  • TI-2025-16079 Soft Serve allows path traversal attacks CVSS 4.0MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences