CVE-2026-25883 | Vexa-ai vexa prior 0.10.0-260419-1910 HTTP POST Request server-side request forgery (GHSA-fhr6-8hff-cvg4)

April 20, 2026 Yanac

A vulnerability described as critical has been identified in Vexa-ai vexa. The affected element is an unknown function of the component HTTP POST Request Handler. Executing a manipulation can lead to server-side request forgery.

This vulnerability is tracked as CVE-2026-25883. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More