Server-Side Request Forgery (SSRF) in langsmith-sdk - CVE-2026-25528
Published: March 6, 2026
Vulnerability identifier: #VU123613
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N]
CVE-ID: CVE-2026-25528
CWE-ID: CWE-918
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The disclosed vulnerability allows a remote attacker to perform SSRF attacks.
The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can inject arbitrary api_url values through the baggage header, causing the SDK to exfiltrate sensitive trace data to attacker-controlled endpoints.
Affected software
langsmith-sdk
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
watsonx Code Assistant On Prem
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
watsonx Code Assistant On Prem
How to mitigate CVE-2026-25528
Install updates from vendor's website.
langsmith-sdk - addressed in versions 0.4.6, 0.6.3
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.3.1 Patch 5
watsonx Code Assistant On Prem - update to 5.3.1
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.3.1 Patch 5
watsonx Code Assistant On Prem - update to 5.3.1