CVE-2026-82638
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Aug 30, 2026
Vendor
unknown
Description
jina-ai reader disables its private-address guard outside Google Cloud deployments, allowing unauthenticated attackers to perform server-side request forgery. Attackers can supply publicly resolvable hostnames mapping to private addresses to retrieve cloud metadata and internal service content.