CVE-2026-102138

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description An authenticated administrator on a node with an optional, separately licensed gateway role enabled can provide a connector URL that the server retrieves without sufficient validation of its scheme or destination. This allows the server to issue unauthorized requests to internal network services. This issue requires the licensed gateway role to be active for exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.