CVE-2026-15508
Full vulnerability record from the local CVENow database.
Description
A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30. This affects the function build_target_url of the file ai-gateway/src/dispatcher/service.rs of the component AWS Metadata Service. Executing a manipulation of the argument extracted_path_and_query can lead to server-side request forgery. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
LOW
CVSS score
2.1
(v4.0)
Vulnerability status
Deferred
Source identifier
Published
2026-07-12 23:16:36.780000
Last modified
2026-10-24 22:10:00.210000
View original CVE JSON
{
"id": "CVE-2026-15508",
"sourceIdentifier": "[email protected]",
"published": "2026-07-12T23:16:36.780",
"lastModified": "2026-10-24T22:10:00.210",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30. This affects the function build_target_url of the file ai-gateway/src/dispatcher/service.rs of the component AWS Metadata Service. Executing a manipulation of the argument extracted_path_and_query can lead to server-side request forgery. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
},
{
"lang": "es",
"value": "Se ha encontrado una vulnerabilidad en Helicone ai-gateway hasta la versión 0.2.0-beta.30. Esto afecta a la función build_target_url del archivo ai-gateway/src/dispatcher/service.rs del componente AWS Metadata Service. La ejecución de una manipulación del argumento extracted_path_and_query puede conducir a una falsificación de petición del lado del servidor. El ataque puede ejecutarse de forma remota. El exploit ha sido publicado y puede ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Helicone",
"product": "ai-gateway",
"cpes": [
"cpe:2.3:a:helicone:ai-gateway:*:*:*:*:*:*:*:*"
],
"modules": [
"AWS Metadata Service"
],
"versions": [
{
"version": "0.2.0-beta.0",
"status": "affected"
},
{
"version": "0.2.0-beta.1",
"status": "affected"
},
{
"version": "0.2.0-beta.2",
"status": "affected"
},
{
"version": "0.2.0-beta.3",
"status": "affected"
},
{
"version": "0.2.0-beta.4",
"status": "affected"
},
{
"version": "0.2.0-beta.5",
"status": "affected"
},
{
"version": "0.2.0-beta.6",
"status": "affected"
},
{
"version": "0.2.0-beta.7",
"status": "affected"
},
{
"version": "0.2.0-beta.8",
"status": "affected"
},
{
"version": "0.2.0-beta.9",
"status": "affected"
},
{
"version": "0.2.0-beta.10",
"status": "affected"
},
{
"version": "0.2.0-beta.11",
"status": "affected"
},
{
"version": "0.2.0-beta.12",
"status": "affected"
},
{
"version": "0.2.0-beta.13",
"status": "affected"
},
{
"version": "0.2.0-beta.14",
"status": "affected"
},
{
"version": "0.2.0-beta.15",
"status": "affected"
},
{
"version": "0.2.0-beta.16",
"status": "affected"
},
{
"version": "0.2.0-beta.17",
"status": "affected"
},
{
"version": "0.2.0-beta.18",
"status": "affected"
},
{
"version": "0.2.0-beta.19",
"status": "affected"
},
{
"version": "0.2.0-beta.20",
"status": "affected"
},
{
"version": "0.2.0-beta.21",
"status": "affected"
},
{
"version": "0.2.0-beta.22",
"status": "affected"
},
{
"version": "0.2.0-beta.23",
"status": "affected"
},
{
"version": "0.2.0-beta.24",
"status": "affected"
},
{
"version": "0.2.0-beta.25",
"status": "affected"
},
{
"version": "0.2.0-beta.26",
"status": "affected"
},
{
"version": "0.2.0-beta.27",
"status": "affected"
},
{
"version": "0.2.0-beta.28",
"status": "affected"
},
{
"version": "0.2.0-beta.29",
"status": "affected"
},
{
"version": "0.2.0-beta.30",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 2.1,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"baseScore": 6.5,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-07-13T15:38:53.451447Z",
"id": "CVE-2026-15508",
"options": [
{
"exploitation": "poc"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-918"
}
]
}
],
"references": [
{
"url": "https://github.com/oscar2744/CVE-Submit/issues/1",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/cve/CVE-2026-15508",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/submit/845671",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/vuln/377837",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/vuln/377837/cti",
"source": "[email protected]"
}
]
}