CVE Intelligence

Webstudio-is Webstudio vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Webstudio-is Webstudio: 1 record(s), with affected versions and fixes.

CVE-2026-86119 High · 8.6 CWE-918 Sep 5, 2026
Webstudio through 0.296.0 SSRF via /cgi proxy routes
Webstudio through 0.296.0 contains an unauthenticated server-side request forgery vulnerability in the /cgi/image, /cgi/video, and /cgi/asset proxy routes when RESIZE_ORIGIN environment variable is unset. Attackers can supply arbitrary URLs to these endpoints to read cloud instance metadata, access internal services, and perform network reconnaissance on the instance infrastructure.