Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-86115

Sim before 0.8.14 Confused Deputy in Tool URL Routing Mints an Internal Token for a User-Supplied /api/ Path

CVSS 4.0 5.3 MEDIUMCVSS 3.1 5.0 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-86115

Published

Sim before 0.8.14 classifies tool requests as internal based on URL prefix matching without scheme normalization, skipping SSRF validation and minting internal authentication tokens. Authenticated workflow authors can bypass external URL validation by supplying paths starting with /api/ in HTTP blocks to reach internal-only endpoints like POST /api/function/execute.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-86115

Published

sim

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "simstudioai",
                    "product": "sim",
                    "repo": "https://github.com/simstudioai/sim",
                    "defaultStatus": "unaffected",
                    "packageURL": "pkg:github/simstudioai/sim",
                    "versions": [
                        {
                            "version": "0",
                            "lessThan": "0.8.14",
                            "status": "affected",
                            "versionType": "semver"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON