Server-Side Request Forgery in ms-swift Product by ModelScope
CVE-2026-85686

8.7HIGH

Key Information:

Vendor

Modelscope

Status
Ms-swift
Vendor
CVE Published:
4 September 2026

What is CVE-2026-85686?

The ms-swift 4.5.2 version is susceptible to a server-side request forgery (SSRF) vulnerability within its OpenAI-compatible API, specifically in the swift deploy feature. This flaw allows unauthenticated attackers to manipulate multimodal media URL requests. By providing arbitrary parameters for image_url, audio_url, or video_url, attackers can compel the server to make unauthorized requests to internal services and cloud metadata endpoints, potentially exposing sensitive information or leading to further compromise.

Affected Version(s)

ms-swift 0 <= 4.5.2

References

https://github.com/modelscope/ms-swift/issues/9740
issue-tracking
https://github.com/modelscope/ms-swift
product
https://github.com/modelscope/ms-swift/blob/v4.5.2/swift/...
technical-description

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

George Chen
.