Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-07-10T09:19:44 guardrails-detectors: guardrails-detectors: SSRF and local file read via user-supplied XML Schema (xml-with-schema:) 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N CWE-918

A flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition (XSD) string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file reads, potentially resulting in sensitive information disclosure, such as cloud provider credentials or access to internal network services.

A flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition (XSD) string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file reads, potentially resulting in sensitive information disclosure, such as cloud provider credentials or access to internal network services.

This vulnerability is rated as Important. It allows an attacker with network access to the detector service to perform Server-Side Request Forgery (SSRF) and local file reads. This is due to the guardrails-detectors component accepting arbitrary XML Schema Definition (XSD) strings, which are then processed by the xmlschema library without restricting external schemaLocation references. This could lead to credential theft or access to internal services. Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-built-in-detector-rhel9 Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-guardrails-detector-huggingface-runtime-rhel9 https://www.cve.org/CVERecord?id=CVE-2026-15143 https://nvd.nist.gov/vuln/detail/CVE-2026-15143