Description
Marqo 2.26.0 contains a server-side request forgery vulnerability in the add_documents endpoint that allows unauthenticated attackers to trigger requests to arbitrary URLs by supplying malicious media field values. Attackers can exploit download_image_from_url and fetch_content_sample functions which lack destination filtering and host validation to access internal services and cloud metadata endpoints.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
marqo-ai marqo
Default version status: unaffected
0 to ≤ 2.26.0affected
References
- https://github.com/marqo-ai/marqo/issues/1452 ↗
- https://github.com/marqo-ai/marqo ↗
- https://github.com/marqo-ai/marqo/blob/2.26.0/components/inference_orchestrator/src/inference_orchestrator/services/media_download_and_preprocess/image_download.py ↗
- https://www.vulncheck.com/advisories/marqo-2.26.0-server-side-request-forgery-via-media-urls ↗