Read the docs
TI-2026-70528 Aliases CVE-2026-108115GHSA-f37m-qrrx-ww7w

Server-side request forgery in Kortix Suna bypasses IP guard

Priority MEDIUM 45CWE-918Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
High
Attack requirements
Present
Impact type
—
Confidentiality · integrity · availability
Low · Low · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Kortix Suna from 0.10.7 before 0.13.52 contains a server-side request forgery flaw (CWE-918) in its private IP check. The isPrivateIp guard fails to block IPv6 6to4 and Teredo addresses that embed private IPv4 destinations, so the check can be bypassed. An attacker holding the project.connector.write permission can point connector URLs at internal services and cloud metadata endpoints and read the responses. A public exploit is linked in the references.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

Description from the CNA

Kortix Suna 0.10.7 before 0.13.52 contains a server-side request forgery vulnerability that allows project managers to bypass the isPrivateIp guard by supplying IPv6 6to4 or Teredo addresses that embed private IPv4 destinations. Attackers holding project.connector.write can set connector base_url, OpenAPI, Postman, or MCP URLs to reach internal services and cloud metadata endpoints and read responses.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00189 8th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix Fixed suna (kortix-ai): 0.13.52

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
kortix-aisuna0.10.7 to before 0.13.520.13.52Patch availableCNA
  • suna Vendorkortix-ai Affected 0.10.7 to before 0.13.52 Fixed in 0.13.52 Patch available CNA

Remediation

Upgrade Kortix Suna to version 0.13.52, which fixes the issue.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

  • Fix · CNA suna (kortix-ai) Fixed in 0.13.52

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-11 Threatist record created from CVE-2026-108115
  2. 2026-10-11 Alias added: GHSA-f37m-qrrx-ww7w
  3. 2026-10-13 CISA SSVC decision points changed
  4. 2026-10-13 Priority changed: LOW → MEDIUM
  5. 2026-11-06 Affected versions changed · Red Hat
  6. 2026-11-06 CVSS score added · Red Hat

References

Exploit 1

Patch 1

Other 3

  • TI-2026-47016 Suna < 0.9.102 Broken Access Control via Message Queue API CVSS 4.0HIGH 8.7
  • TI-2026-10949 kortix-ai suna Auth Endpoint page.tsx router.push cross site scripting CVSS 4.0MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences