CVE-2026-86115

Medium

Description

Sim before 0.8.14 classifies tool requests as internal based on URL prefix matching without scheme normalization, skipping SSRF validation and minting internal authentication tokens. Authenticated workflow authors can bypass external URL validation by supplying paths starting with /api/ in HTTP blocks to reach internal-only endpoints like POST /api/function/execute.

SeverityMedium

CVSS5.0

Exploit probability—

ProductSim

PublishedSep 5, 2026

First seenSep 5, 2026

Weakness typeCWE-441CWE-441

How to fix

Update

simstudioai sim0.8.14 or later

Patches

github.com/simstudioai/sim/pull/7179

Affected products

Product	Affected versions	Fixed in
simstudioai sim	v < 0.8.14	0.8.14

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.