CVE-2026-22681

The CVSS 8.5 rating for this SSRF is misleading. This isn't a typical authenticated limitation—it's a direct path to cloud infrastructure credentials. The vulnerability allows a low-privilege user to POST to /api/v1/resources, trigger server-side outbound requests with redirect following enabled, and read responses back through normal APIs. That's not blind SSRF; that's a full read path to 169.254.169.254 and its regional variants. A low-privilege OpenViking user extracting AWS, GCP, or Azure instance credentials has graduated beyond your application's privilege boundary entirely—they now have whatever IAM permissions the compromised instance carries. The 'authenticated low-privilege' qualifier narrows the CVSS vector while the real attack surface stays unchanged. In early-stage software (0.3.4), low-privilege account creation is often trivial—sometimes automatic, occasionally default-enabled. Authentication was likely added post-discovery as a band-aid, not as a root-cause fix. Verify the 0.3.4 patch carefully: check whether it disables redirect following entirely, blocks metadata IP ranges at the network layer, or merely adds a blocklist that can be bypassed with regional metadata variants. If the underlying 'fetch arbitrary URLs' capability remains, you've got a deferred vulnerability—the dangerous behavior is still there, just gated. Even with a clean patch, any instance that processed crafted requests before the fix may have short-lived credentials already compromised and rotating in attacker-controlled infrastructure. The blast radius extends beyond your patching timeline.

Reviewed through automated stages and approved by a human before publication.