Vulnerability · Published Jul 9, 2026 · Assigned by GitHub_M
CVE-2026-33655New API: SSRF Protection Bypass via Unresolved Hostname in Notification URLs
High 7.7
In plain English
A high-severity server-side request forgery in new-api from QuantumNous. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 0.12.0-alpha.1, the default SSRF protection configuration did not apply IP filtering to hostnames; with ApplyIPFilterForDomain disabled by default, URL validation checked domain allow/block rules but did not resolve a hostname and validate the resolved IP address, allowing authenticated users to configure Webhook, Bark, or Gotify notification URLs that point at an internal or metadata IP address. This issue is fixed in version 0.12.0-alpha.1.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Go | github.com/QuantumNous/new-api | 0.12.0-alpha.1 | GO-2026-5930 |
| Go | github.com/QuantumNous/new-api | 0.12.0-alpha.1 | GHSA-6qcr-qxgr-m7fv |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| QuantumNous | new-api | < 0.12.0-alpha.1 |
Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N