Server-Side Request Forgery Vulnerability in Malach-IT Boruta
CVE-2026-54885

6.9MEDIUM

Key Information:

Vendor

Malach-it

Status
Boruta
Vendor
CVE Published:
30 July 2026

What is CVE-2026-54885?

A Server-Side Request Forgery vulnerability exists in Boruta, which allows unauthenticated attackers to manipulate the OAuth/OpenID authorization server into making outbound HTTP requests to maliciously chosen URIs. This occurs due to improper validation of input parameters across multiple code paths. The vulnerability permits attackers to circumvent security measures as the server does not enforce strict checks on request schemes or limit the URIs that can be accessed, thereby compromising internal services and cloud metadata endpoints.

Affected Version(s)

boruta 2.3.2 < 2.3.7

boruta 15455b86206e0370eabd64c1856a5c996b436455

References

https://github.com/malach-it/boruta_auth/security/advisor...
vendor-advisoryrelated
https://cna.erlef.org/cves/CVE-2026-54885.html
related
https://osv.dev/vulnerability/EEF-CVE-2026-54885
related

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Pascal Knoth
Pascal Knoth
Jonatan Männchen / EEF
.