Vulnerability · Published Sep 4, 2026 · Assigned by VulnCheck

CVE-2026-85686ms-swift 4.5.2 Unauthenticated SSRF via Multimodal Media URLs

High 7.5

In plain English

A high-severity server-side request forgery in ms-swift from modelscope. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.5%top 58.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

ms-swift 4.5.2 contains a server-side request forgery vulnerability in the swift deploy OpenAI-compatible API that fetches multimodal media URLs without validation or redirect filtering. Unauthenticated attackers can supply arbitrary image_url, audio_url, or video_url parameters to make the server issue requests to internal services and cloud metadata endpoints.

Affected products (as reported)

Vendor	Product	Versions
modelscope	ms-swift	0 – through 4.5.2

Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

GitHub Issue #9740 issue-tracking
https://github.com/modelscope/ms-swift product
https://github.com/modelscope/ms-swift/blob/v4.5.2/swift/template/vision_utils.py technical-description
VulnCheck Advisory: ms-swift 4.5.2 Unauthenticated SSRF via Multimodal Media URLs third-party-advisory