CVE-2025-66405
Critical
Description
Portkey.ai Gateway is a blazing fast AI Gateway with integrated guardrails. Prior to 1.14.0, the gateway determined the destination baseURL by prioritizing the value in the x-portkey-custom-host request header. The proxy route then appends the client-specified path to perform an external fetch. This can be maliciously used by users for SSRF attacks. This vulnerability is fixed in 1.14.0.
SeverityCritical
CVSS9.8
Exploit probability—
ProductPortkey Gateway
PublishedDec 1, 2025
First seenDec 1, 2025
Weakness typeCWE-918Server-side request forgery (SSRF)
How to fix
Update
- portkey gateway1.14.0 or later
- @portkey-ai/gateway1.14.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| portkey gateway | v < 1.14.0 | 1.14.0 |
| @portkey-ai/gatewaynpm | v < 1.14.0 | 1.14.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.