Threat Investigation
Request a demo

CVE-2026-72566

High

Description

A server-side request forgery (SSRF) vulnerability in automatisch through commit 41f3c56 allows a low-privileged authenticated user with 'manage Flow' permission to make the server fetch arbitrary URLs and retrieve the full response body via the HTTP Request app's Custom Request action.

SeverityHigh
CVSS7.7
Exploit probability—
ProductAutomatisch
PublishedAug 10, 2026
First seenAug 10, 2026
Weakness typeCWE-918Server-side request forgery (SSRF)

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
automatisch automatischv ≤ 41f3c56—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.