CVE-2026-111320 | ValueCell-ai ValueCell up to 0.1.20 Provider Config Endpoint /api/v1/models/check base_url server-side request forgery

October 15, 2026 Yanac

A vulnerability has been found in ValueCell-ai ValueCell up to 0.1.20 and classified as critical. The impacted element is an unknown function of the file /api/v1/models/check of the component Provider Config Endpoint. This manipulation of the argument base_url causes server-side request forgery.

This vulnerability is registered as CVE-2026-111320. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More