CVE-2026-54457

HIGHPre-NVD 7.77.7

7.7

EchelonGraph verdictPlan a fixSerious severity, but no confirmed exploitation yet.

High severity, but no confirmed exploitation yet

CISA-KEV: Not listedEPSS: —CVSS: 7.7Exploit: NoneExposed: 0

No vendor fix yet — apply a workaround or compensating control (WAF / firewall / segmentation) and watch for a patch.

TensorZero Gateway: Arbitrary file read and SSRF in internal object storage endpoint

Impact

The /internal/object_storage endpoint accepts a caller-supplied JSON storage_path parameter that dynamically overrides the TensorZero [object_storage] configuration.

By abusing the filesystem storage type, a caller can read arbitrary files from the gateway filesystem, including files that may contain sensitive credentials. Similarly, by abusing the s3_compatible storage type, the caller can coerce the gateway into making outbound object storage requests to attacker-chosen internal/cloud-metadata endpoints.

This vulnerability only applies when the gateway can be accessed by untrusted callers. If a developer's TensorZero deployment has authentication enabled, only authenticated callers can exploit this vulnerability. If a developer's deployment has authentication disabled, any caller can exploit this vulnerability.

Remediation

The vulnerability has been patched in version 2026.6.0. See PR #7527.

Workarounds

If developers are unable to upgrade a gateway that is exposed to untrusted callers, please block external access to the /internal/object_storage endpoint.

CVSS v3: 7.7
EG Score: 7.7(low)
EPSS: —
KEV: Not listed

Published

July 15, 2026

Last Modified

July 15, 2026

Vendor Advisories for CVE-2026-54457(1)

These vendors published their own advisory mentioning this CVE — often with vendor-specific remediation steps + affected product lists not in NVD.

GHSA-824w-x939-6cmc
GitHub Security AdvisoriesHigh
TensorZero Gateway: Arbitrary file read and SSRF in internal object storage endpoint

Data Freshness Timeline

(refreshed 1× in last 7d / 1× in last 30d)

Each row is a source pipeline that fetched or updated this CVE on that date, with what changed. For example, "NVD update" means NVD published or revised its analysis for this CVE; "MITRE cvelistV5" means we ingested or refreshed it from the CNA feed. Most recent first.

2026-07-15 22:19 UTCEG score recompute

Frequently asked(4)

What is CVE-2026-54457?

CVE-2026-54457 is a high vulnerability published on July 15, 2026. TensorZero Gateway: Arbitrary file read and SSRF in internal object storage endpoint Impact The /internal/objectstorage endpoint accepts a caller-supplied JSON storagepath parameter that dynamically overrides the TensorZero [object_storage] configuration. By abusing the filesystem storage type, a…

When was CVE-2026-54457 disclosed?

CVE-2026-54457 was first published in the National Vulnerability Database on July 15, 2026. EchelonGraph re-ingests CVE updates from NVD on a 2-hour cycle, so this page reflects the latest published state.

What is the CVSS score of CVE-2026-54457?

CVE-2026-54457 has a CVSS v4.0 base score of 7.7 (CNA self-assessment; NVD's own analysis pending). The EG score is currently aggregating — additional source signals are being incorporated as they become available..

How do I remediate CVE-2026-54457?

Patch to the fixed version published by the affected vendor. Where vendor advisories exist for CVE-2026-54457, EchelonGraph cross-links them in the Vendor Advisories panel below — those typically contain the canonical remediation steps, fixed version numbers, and any vendor-specific mitigations.

Dependency Blast Radius

Explore the affected products and dependency analysis for CVE-2026-54457

Explore →

Is Your Infrastructure Affected by CVE-2026-54457?

EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.

Start Free Scan →Browse All CVEs