{"id":"CVE-2026-42339","published":"2026-05-08T22:21:53Z","modified":"2026-05-11T15:56:48Z","title":"New API: SSRF Filter Bypass via 0.0.0.0","vendor":"QuantumNous","product":"new-api","tier":"tail","description":{"text":"New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. In versions 0.11.9-alpha.1 and prior, the SSRF protection introduced in v0.9.0.5 (CVE-2025-59146) and hardened in v0.9.6 (CVE-2025-62155) does not block the unspecified address 0.0.0.0. A regular (non-admin) user holding any valid API token can send a multimodal request to /v1/chat/completions, /v1/responses, or /v1/messages with 0.0.0.0 as the image/file URL host, bypassing the private-IP filter and causing the server to issue HTTP requests to localhost. This constitutes at minimum a blind SSRF; when the request is routed through an AWS/Bedrock Claude adaptor, the fetched content is inlined into the model response, upgrading it to a full-read SSRF. At time of publication, there are no publicly available patches.","provenance":"source","from":"CVE.org"},"cvss":{"score":7.1,"severity":"HIGH","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.00258,"percentile":0.17446,"provenance":"source"},"cwes":[{"id":"CWE-918","name":"Server-Side Request Forgery"}],"references":[{"url":"https://github.com/QuantumNous/new-api/security/advisories/GHSA-v5c3-6wvc-pc2q","tags":["x_refsource_CONFIRM"]}],"priority":{"score":8.5,"factors":[{"name":"EPSS percentile","points":3.49},{"name":"CVSS severity","points":4.97}]},"vendorSlug":"quantumnous","affectedVersions":[{"vendor":"QuantumNous","product":"new-api","versions":["<= 0.11.9-alpha.1"]}],"affected":[{"ecosystem":"Go","package":"github.com/QuantumNous/new-api","vulnerableRanges":["<=0.11.9-alpha.1","all versions"],"patched":[],"from":["GHSA-v5c3-6wvc-pc2q","GO-2026-5652"],"provenance":"source"}],"euvd":{"id":"EUVD-2026-28852","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-quantumnous-new-api-cve-2025-59146","parents":[{"from":"CVE-2025-59146","to":"CVE-2026-42339","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"In versions 0.11.9-alpha.1 and prior, the SSRF protection introduced in v0.9.0.5 (CVE-2025-59146) and hardened in v0.9.6 (CVE-2025-62155) does not block the unspecified address 0.0.0.0.","from":"CVE.org","in":"CVE-2026-42339"}]},{"from":"CVE-2025-62155","to":"CVE-2026-42339","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"In versions 0.11.9-alpha.1 and prior, the SSRF protection introduced in v0.9.0.5 (CVE-2025-59146) and hardened in v0.9.6 (CVE-2025-62155) does not block the unspecified address 0.0.0.0.","from":"CVE.org","in":"CVE-2026-42339"},{"kind":"osv-related","provenance":"source","id":"GHSA-v5c3-6wvc-pc2q","via":"reference","url":"https://github.com/advisories/GHSA-9f46-w24h-69w4"},{"kind":"osv-related","provenance":"source","id":"GO-2026-5652","via":"reference","url":"https://github.com/advisories/GHSA-9f46-w24h-69w4"}]}]}}