Server-Side Request Forgery (SSRF) in Janus WebRTC Server - #VU151864
Published: September 23, 2026
Vulnerability identifier: #VU151864
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-918
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to send arbitrary commands to internal services.
The vulnerability exists due to improper URL protocol restriction in the Streaming plugin's RTSP mountpoint URL handling when processing API-supplied URLs. A remote attacker can supply a gopher URL through the plugin signaling API to send arbitrary commands to internal services.
Requests made through this vector are blind.
Affected software
Janus WebRTC Server
Remediation
Install security update from vendor's website.
Janus WebRTC Server - addressed in versions 0.16.2, 1.4.2