Description
Portkey AI Gateway 1.14.0 through 1.15.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to reach loopback and Docker host services because isValidCustomHost trusts localhost-style hosts when TRUSTED_CUSTOM_HOSTS is unset. Attackers can send /v1 requests with a crafted x-portkey-custom-host header, such as via the ollama provider, to make the gateway call internal services and return their responses.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Portkey-AI gateway
Default version status: unaffected
1.14.0 to ≤ 1.15.2affected
pkg:npm/%40portkey-ai/gatewayReferences
- https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/BJypv-aiMg ↗
- https://github.com/Portkey-AI/gateway/blob/ca7712947ec8c0887803990b746740d36011c697/src/middlewares/requestValidator/index.ts#L289 ↗
- https://github.com/Portkey-AI/gateway ↗
- https://www.vulncheck.com/advisories/portkey-ai-gateway-1.14.0-through-1.15.2-ssrf-via-x-portkey-custom-host-header ↗