CVE-2026-54457

Name of the Vulnerable Software and Affected Versions TensorZero versions prior to 2026.6.0

Description The /internal/object storage endpoint accepts a caller-supplied JSON storage path parameter that dynamically overrides the [object storage] configuration. By abusing the filesystem storage type, a caller can read arbitrary files from the gateway filesystem, potentially exposing sensitive credentials. Additionally, abusing the s3 compatible storage type allows a caller to coerce the gateway into making outbound object storage requests to attacker-chosen internal or cloud-metadata endpoints. The risk depends on authentication settings: if enabled, only authenticated callers can exploit the issue; if disabled, any caller can do so.

Recommendations Update to version 2026.6.0. Block external access to the /internal/object storage endpoint.