Tools AI Risk Radar ai-incident-0128
Incident record
NextChat proxy lets callers reach internal network addresses
- Severity
- High
- Status
- Proof-of-concept
- Type
- Infra Vuln
- Target
- NextChat through 2.16.1
- Actor
- researcher
- CVE
- CVE-2026-105238
What happened
An unauthenticated caller can set the proxy’s destination and make NextChat request internal services or cloud metadata. This is server-side request forgery: the application sends a request to an address chosen by the attacker. The 5 October CVE scores it 7.3 High under CVSS 3.1.
The public report covers the x-base-url proxy fallback. Fix proposal 6884 remained open and unmerged when checked on 10 October. A separate API-key disclosure report is outside this row’s CVE.
Sources
- CVE recordcveawg.mitre.org/api/cve/CVE-2026-105238
- Researcher reportgithub.com/ChatGPTNextWeb/NextChat/issues/6813
- Proposed fixgithub.com/ChatGPTNextWeb/NextChat/pull/6884
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026