CVE-2026-110719Published
Portkey AI Gateway 1.14.0 through 1.15.2 SSRF via x-portkey-custom-host Header
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-110719 · Microsoft / collected KEV context
cve-program · CVE-2026-110719
- https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/BJypv-aiMg
- https://github.com/Portkey-AI/gateway/blob/ca7712947ec8c0887803990b746740d36011c697/src/middlewares/requestValidator/index.ts#L289
- https://github.com/Portkey-AI/gateway
- https://www.vulncheck.com/advisories/portkey-ai-gateway-1.14.0-through-1.15.2-ssrf-via-x-portkey-custom-host-header
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.