CVE-2026-114374 | leomoon-studios wiki-go up to 1.9.1 fetch-metadata Endpoint metadata_api.go server-side request forgery (GHSA-7q4p-98g4-pwp7)

October 21, 2026 Yanac

A vulnerability described as problematic has been identified in leomoon-studios wiki-go up to 1.9.1. This impacts an unknown function of the file internal/handlers/metadata_api.go of the component fetch-metadata Endpoint. Such manipulation leads to server-side request forgery.

This vulnerability is referenced as CVE-2026-114374. It is possible to launch the attack remotely. Furthermore, an exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More