CVE-2026-114362 | HarnessRouter up to 0.31.12 Targets Test Endpoint gateway/app.py base_url server-side request forgery (GHSA-c5g7-c47h-f6c3)

October 21, 2026 Yanac

A vulnerability was found in HarnessRouter up to 0.31.12 and classified as critical. This impacts an unknown function of the file gateway/app.py of the component Targets Test Endpoint. Executing a manipulation of the argument base_url can lead to server-side request forgery.

This vulnerability appears as CVE-2026-114362. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More