CVE-2026-48053

Name of the Vulnerable Software and Affected Versions Kolibri versions prior to 0.19.4

Description Several API endpoints accept an unvalidated baseurl parameter, allowing the server to fetch attacker-controlled URLs and reflect the response body back to the caller. This occurs because the baseurl is only validated for HTTP/HTTPS schemes, failing to restrict private IP ranges, loopback addresses, or link-local addresses. Additionally, the server follows HTTP redirects by default, which can be used to pivot requests to internal services or cloud metadata endpoints.

Impact includes unauthenticated outbound requests, reflected data exfiltration from internal HTTP services, and access to cloud metadata (such as AWS IMDSv1 and DigitalOcean metadata).

Recommendations Update Kolibri to version 0.19.4 or later. As a temporary mitigation, restrict network access to the Kolibri server to prevent it from making outbound requests to internal IP ranges or cloud metadata services. Restrict access to the 'GET /api/auth/remotefacilityuser' endpoint to authenticated users only.