THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-15378 (CRITICAL 9.3) — A flaw was found in the `guardrails-detectors` component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery (SSRF) by submitting a specially crafted XML Schema Definition (XSD) string. This can lead to unauthorized access to sensitive info

[NVD] CVE-2026-15378 (CRITICAL 9.3) — A flaw was found in the `guardrails-detectors` component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery (SSRF) by submitting a specially crafted XML Schema Definition (XSD) string. This can lead to unauthorized access to sensitive info

lownvdPublished 2026-07-10

CVE-2026-15378 CVSS: 9.3 CRITICAL Published: 2026-07-10T10:16:23.553

A flaw was found in the `guardrails-detectors` component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery (SSRF) by submitting a specially crafted XML Schema Definition (XSD) string. This can lead to unauthorized access to sensitive information, including credentials from cloud metadata

MITRE ATT&CK techniques

CredentialsT1589.001

Indicators of compromise

CVE-2026-15378cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-15378