CVE-2026-108939 | EricLBuehler mistral.rs up to 0.9.3 media_source.rs is_global_ip server-side request forgery

SecurityVulns
Yanac

A vulnerability labeled as problematic has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function is_global_ip of the file mistralrs-server-core/src/media_source.rs. Such manipulation of the argument ip leads to server-side request forgery.

This vulnerability is uniquely identified as CVE-2026-108939. The attack can be launched remotely. Moreover, an exploit is present.

The affected component should be upgraded.VulDB Recent EntriesRead More