CVE-2026-108741

Name of the Vulnerable Software and Affected Versions Shepherd (shepherd-ai) versions prior to 0.3.2

Description A server-side request forgery guard bypass exists in the citation-checker extra. The issue occurs because the public url guard validates a resolved address, but the fetch function re-resolves the hostname during the connection phase. This allows attackers who control the DNS of a crafted reference URL within a checked document to perform DNS rebinding to internal addresses. Consequently, they can send GET requests to internal HTTP(S) services and capture the responses in evidence files.

Recommendations Update Shepherd (shepherd-ai) to version 0.3.2 or later.