Vulnerability · Published Jul 10, 2026 · Assigned by redhat

CVE-2026-15143Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)

Critical 9.3

In plain English

A critical-severity server-side request forgery in guardrails-detectors. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).

Severity (CVSS 3.1)9.3Critical

Exploit odds (30 days)0.5%top 54.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition (XSD) string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file reads, potentially resulting in sensitive information disclosure, such as cloud provider credentials or access to internal network services.

Affected products (as reported)

Vendor	Product	Versions
	guardrails-detectors	0 – before 985c6d5a4a84360ff8b447b94e4a3cdfbda3da90
Red Hat	Red Hat OpenShift AI 2.25	see references
Red Hat	Red Hat OpenShift AI 2.25	see references
Red Hat	Red Hat OpenShift AI 3.4	see references
Red Hat	Red Hat OpenShift AI 3.4	see references

Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

References

RHSA-2026:84734 vendor-advisory, x_refsource_REDHAT
RHSA-2026:87410 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-15143 vdb-entry, x_refsource_REDHAT
RHBZ#2498165 issue-tracking, x_refsource_REDHAT