Vulnerability · Published Oct 11, 2026 · Assigned by VulnCheck

CVE-2026-108719LLMGateway through 1.20.0 Blind SSRF via Video-Generation callback_url

Medium 5.0

In plain English

A medium-severity server-side request forgery in LLMGateway from theopenco. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).

Severity (CVSS 3.1)5.0Medium

Exploit odds (30 days)0.3%top 79.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

LLMGateway through 1.20.0 contains a blind server-side request forgery vulnerability that allows API key holders to reach internal hosts via the video-generation callback_url extension. Attackers can supply loopback, private, or cloud-metadata URLs that deliverWebhook POSTs to without the assertSafeWebhookTarget check, reaching internal services from the worker's network.

Affected products (as reported)

Vendor	Product	Versions
theopenco	LLMGateway	0 – through 1.20.0

Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

References

https://hackmd.io/@haind03/theopenco-llmgateway-video-callback-ssrf-no-egress-guard third-party-advisory
https://github.com/theopenco/llmgateway/blob/c84ba987da18edd80358a3450ccaea75c5c67ca8/apps/gateway/src/videos/videos.ts#L374-L383 technical-description
https://github.com/theopenco/llmgateway/blob/c84ba987da18edd80358a3450ccaea75c5c67ca8/apps/worker/src/services/video-jobs.ts#L2490-L2499 technical-description
https://github.com/theopenco/llmgateway/blob/c84ba987da18edd80358a3450ccaea75c5c67ca8/apps/worker/src/worker.ts#L2961-L2971 technical-description
https://github.com/theopenco/llmgateway product
VulnCheck Advisory: LLMGateway through 1.20.0 Blind SSRF via Video-Generation callback_url third-party-advisory