CVE-2026-82638

Name of the Vulnerable Software and Affected Versions jina-ai reader (affected versions not specified)

Description The software disables its private-address guard when deployed outside of Google Cloud environments, which enables unauthenticated attackers to perform server-side request forgery (SSRF). SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location. By providing publicly resolvable hostnames that map to private addresses, attackers can retrieve internal service content and cloud metadata.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.