Server-Side Request Forgery in Jina AI Reader Affects Internal Networks

CVE-2026-85699

What is CVE-2026-85699?

Jina AI Reader is susceptible to a server-side request forgery vulnerability due to incomplete URL validation that only applies to the initial request. This design flaw allows attackers to create malicious public URLs that can redirect requests to internal network addresses or sensitive cloud metadata endpoints. As a result, the server may inadvertently fetch and relay the response content back to the attacker, which could lead to unauthorized access to internal resources.

References