CVE-2026-47260

Name of the Vulnerable Software and Affected Versions Koel versions prior to 9.3.5

Description Koel fails to validate individual episode enclosure URLs extracted from RSS XML feeds, despite validating the main podcast feed URL. These unvalidated URLs are stored in the database and subsequently processed by the server using the Http::sink()->get() function within the EpisodePlayable::createForEpisode() method. This allows an attacker to perform a full-read Server-Side Request Forgery (SSRF), where the server downloads the full HTTP response from an internal service and streams it back to the user. This can be exploited to steal cloud credentials from metadata endpoints, perform internal network reconnaissance, or exfiltrate data from internal APIs.

Additionally, the AI assistant tool AddRadioStation bypasses SafeUrl and HasAudioContentType validation rules when creating radio stations via the RadioService::createRadioStation() function, leading to a similar SSRF risk.

Recommendations Update to version 9.3.5. As a temporary mitigation, restrict the use of the AddRadioStation AI tool to minimize the risk of exploitation.