GHSA-jr8q-q76f-qjghMediumCVSS 5.0
OpsTree REMS through 1.0.0 contains a server-side request forgery vulnerability that allows...
🔗 CVE IDs covered (1)
📋 Description
OpsTree REMS through 1.0.0 contains a server-side request forgery vulnerability that allows authenticated users to make the backend connect to arbitrary destinations through the database Test Connection feature. Attackers can set a database entry's host and port to localhost, internal addresses, or attacker-controlled servers to probe internal hosts and ports reachable from the REMS server.
🔗 References (5)
- https://nvd.nist.gov/vuln/detail/CVE-2026-126770
- https://gist.github.com/neelkotnis/3c4a44d71e8f08747fbac13b2be87427
- https://opstree.com/rems-ai-powered-observability
- https://www.vulncheck.com/advisories/opstree-rems-through-1.0.0-ssrf-via-database-test-connection
- https://github.com/advisories/GHSA-jr8q-q76f-qjgh