SSRF Vulnerability in Twenty CRM Software
CVE-2026-27023

5MEDIUM

Key Information:

Vendor

Twentyhq

Status
Twenty
Vendor
CVE Published:
5 March 2026

What is CVE-2026-27023?

Prior to version 1.18, Twenty, an open-source CRM, posed a security risk due to inadequate validation within its SecureHttpClientService. The SSRF protection implemented allowed authenticated users to manipulate outbound request URLs, which in turn compromised the blocking of private IP addresses through controlled URL redirection. This vulnerability enabled attackers to route requests via their servers, potentially exposing sensitive data or systems connected to those URLs. An update to version 1.18 effectively addresses this issue by enhancing validation processes for redirect targets.

Affected Version(s)

twenty < 1.18

References

https://github.com/twentyhq/twenty/security/advisories/GH...
x_refsource_CONFIRM
https://github.com/twentyhq/twenty/releases/tag/v1.18.0
x_refsource_MISC

CVSS V3.1

Score:
5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.