Read the docs
TI-2026-30643 Aliases CVE-2026-42339GHSA-v5c3-6wvc-pc2q

New API: SSRF Filter Bypass via 0.0.0.0

Priority HIGH 70CWE-918Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
Low · High · None
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub.

Summary

New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. In versions 0.11.9-alpha.1 and prior, the SSRF protection introduced in v0.9.0.5 (CVE-2025-59146) and hardened in v0.9.6 (CVE-2025-62155) does not block the unspecified address 0.0.0.0. A regular (non-admin) user holding any valid API token can send a multimodal request to /v1/chat/completions, /v1/responses, or /v1/messages with 0.0.0.0 as the image/file URL host, bypassing the private-IP filter and causing the server to issue HTTP requests to localhost. This constitutes at minimum a blind SSRF; when the request is routed through an AWS/Bedrock Claude adaptor, the fetched content is inlined into the model response, upgrading it to a full-read SSRF. At time of publication, there are no publicly available patches.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00258 17th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
QuantumNousnew-apiup to 0.11.9-alpha.1—No fix listedCNA
—github.com/QuantumNous/new-api (Go)up to 0.11.9-alpha.1—No fix listedGHSA-v5c3-6wvc-pc2q
  • new-api VendorQuantumNous Affected up to 0.11.9-alpha.1 Fixed in — No fix listed CNA
  • github.com/QuantumNous/new-api (Go) Vendor— Affected up to 0.11.9-alpha.1 Fixed in — No fix listed GHSA-v5c3-6wvc-pc2q

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:newapi:new_api:*:*:*:*:*:*:*:*before 0.11.9VulnerableQuantumNous
cpe:2.3:a:newapi:new_api:0.11.9:alpha1:*:*:*:*:*:*0.11.9 alpha1VulnerableQuantumNous
  • cpe:2.3:a:newapi:new_api:*:*:*:*:*:*:*:* Versions before 0.11.9 Vulnerable ·QuantumNous
  • cpe:2.3:a:newapi:new_api:0.11.9:alpha1:*:*:*:*:*:* Versions 0.11.9 alpha1 Vulnerable ·QuantumNous

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-42339
  2. 2026-10-03 Alias added: GHSA-v5c3-6wvc-pc2q

References

Exploit 1

Advisory 2

Other 1

  • TI-2025-35042 QuantumNous new-api v.0.8.5.2 is vulnerable to Cross Site Scripting (XSS). CVSS 3.1HIGH 8.8
  • TI-2026-30031 New API: Stripe Webhook Signature Bypass via Empty Secret Enables Unlimited Quota Fraud CVSS 3.1HIGH 8.2
  • TI-2026-20865 New API has Potential XSS in its MarkdownRenderer component CVSS 3.1HIGH 7.6
  • TI-2026-20698 New API has an SQL LIKE Wildcard Injection DoS via Token Search CVSS 4.0HIGH 7.1
  • TI-2026-23715 New API: IDOR in VideoProxy allows cross-user video content access via missing ownership check CVSS 3.1MEDIUM 6.5
  • TI-2026-26035 New API: SSRF Protection Bypass via Unresolved Hostname in Notification URLs CVSS 3.1HIGH 7.7
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences