Server-Side Request Forgery in easyVoice by cosin2077
CVE-2026-121936

6.9MEDIUM

Key Information:

Vendor

Cosin2077

Status
Easyvoice
Vendor
CVE Published:
4 November 2026

What is CVE-2026-121936?

The easyVoice application before version 0.0.23 is susceptible to a server-side request forgery (SSRF) vulnerability. This flaw allows unauthenticated users to manipulate the 'openaiBaseUrl' parameter when 'useLLM' is enabled, thereby triggering POST requests that target the server's internal resources. Attackers can exploit this vulnerability via the /api/v1/tts endpoints, potentially probing loopback and internal services by leveraging reflected error messages within the 'x-generate-tts-warning' header to identify internal hosts and ports.

Affected Version(s)

easyVoice 0 < 0.0.23

References

https://github.com/cosin2077/easyVoice/issues/87
issue-tracking
https://github.com/cosin2077/easyVoice/pull/88
issue-trackingpatch
https://github.com/cosin2077/easyVoice/commit/82fcb5b2f32...
patch

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

George Chen
.