Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: kortix-ai Clear all filters
TI-2026-70528 CVE-2026-108115 · GHSA-f37m-qrrx-ww7w

Server-side request forgery in Kortix Suna bypasses IP guard

Priority MEDIUM 45

Kortix Suna 0.10.7 before 0.13.52 contains a server-side request forgery vulnerability that allows project managers to bypass the isPrivateIp guard by supplying IPv6 6to4 or Teredo addresses that embed private IPv4 desti…

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00189 Published 2026-10-10 Fixed in 0.13.52 CWE-918
TI-2026-47016 CVE-2026-66027 · GHSA-59cg-fj2q-33c4

Suna < 0.9.102 Broken Access Control via Message Queue API

Priority HIGH 73

Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated attackers to access and manipulate queue resources belonging to other users by exploiting missing owne…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00456 Published 2026-07-24 Fixed in 0.9.102 CWE-862