Vulnerability · Published Sep 4, 2026 · Assigned by VulnCheck
CVE-2026-85675OWL DocumentProcessingToolkit Server-Side Request Forgery via URL Fetching
High 7.5
In plain English
A high-severity server-side request forgery in owl from camel-ai. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.5%top 58.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
OWL's DocumentProcessingToolkit contains a server-side request forgery vulnerability in the extract_document_content tool that fetches caller-supplied URLs with no scheme, host, or IP filtering. Attackers can inject malicious URLs through prompt injection to make the server fetch internal resources, with responses returned to the agent context.
Affected products (as reported)
Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- GitHub Issue #615 issue-tracking
- https://github.com/camel-ai/owl product
- https://github.com/camel-ai/owl/blob/fba1dd5b3a9e8cc15f16221bb002cca7e3de2d9d/owl/utils/document_toolkit.py technical-description
- VulnCheck Advisory: OWL DocumentProcessingToolkit Server-Side Request Forgery via URL Fetching third-party-advisory