CVE-2026-85686

Name of the Vulnerable Software and Affected Versions ms-swift version 4.5.2

Description The swift deploy OpenAI-compatible API contains a server-side request forgery (SSRF) issue, which occurs when a server is tricked into making requests to an unintended location. The API fetches multimodal media URLs without proper validation or redirect filtering. Unauthenticated attackers can provide arbitrary values to the image url, audio url, or video url parameters, allowing the server to send requests to internal services and cloud metadata endpoints.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.