CVE-2026-85666
Description
A flaw was found in OGX, an OpenAI-compatible server. A remote, unauthenticated attacker can exploit a Server-Side Request Forgery (SSRF) vulnerability by manipulating the server_url parameter within MCP tool definitions. This allows the attacker to force the server to connect to arbitrary internal network addresses, potentially disclosing sensitive information such as cloud metadata or internal credentials.
Statement
This Important flaw in OGX, as deployed in Red Hat Lightspeed Core and Red Hat OpenShift AI, enables a remote, unauthenticated attacker to conduct Server-Side Request Forgery. Exploitation of an unvalidated server_url parameter can compel the server to connect to internal network resources, potentially exposing sensitive data like cloud metadata or internal credentials, particularly in default unauthenticated deployments.
Mitigation
To mitigate this issue, enable authentication for the OGX service to prevent unauthenticated access to the vulnerable endpoint. Alternatively, restrict network access to the OGX service to trusted internal networks or localhost using firewall rules to limit exposure to remote attackers. If the service is reconfigured, a restart may be required for changes to take effect.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 7.5 | N/A | 7.5 |
| Attack Vector | Network | N/A | Network |
| Attack Complexity | Low | N/A | Low |
| Privileges Required | None | N/A | None |
| User Interaction | None | N/A | None |
| Scope | Unchanged | N/A | Unchanged |
| Confidentiality | High | N/A | High |
| Integrity Impact | None | N/A | None |
| Availability Impact | None | N/A | None |
Vector
Red Hat: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cve.org: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
