Vulnerability Description
Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network services, and localhost-bound services through the application server's direct HTTP requests.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/lfnovo/open-notebook
- https://github.com/lfnovo/open-notebook/blob/8889087e317177d7b6e286342ab34e0c9c0
- https://github.com/lfnovo/open-notebook/commit/9045ea50196927eac7de647bb5b700934
- https://github.com/lfnovo/open-notebook/issues/1284
- https://www.vulncheck.com/advisories/open-notebook-before-1.11.0-server-side-req
- https://github.com/lfnovo/open-notebook/issues/1284
FAQ
What is CVE-2026-90769?
CVE-2026-90769 is a vulnerability with a CVSS score of 7.7 (HIGH). Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply a...
How severe is CVE-2026-90769?
CVE-2026-90769 has been rated HIGH with a CVSS base score of 7.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-90769?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.