Server-Side Request Forgery (SSRF) in Checkov by Prisma Cloud - CVE-2026-0311
Published: October 15, 2026
Vulnerability identifier: #VU155833
CSH Severity: Medium
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:L/SI:N/SA:N]
CVE-ID: CVE-2026-0311
CWE-ID: CWE-918
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to make unauthorized network requests from the host to internal services.
The vulnerability exists due to server-side request forgery in Checkov by Prisma Cloud when scanning untrusted content. A remote attacker can supply untrusted content for scanning to make unauthorized network requests from the host to internal services.
Exploitation requires passive user interaction. No special configuration is required.
Affected software
Checkov by Prisma Cloud
How to mitigate CVE-2026-0311
Install security update from vendor's website.
Checkov by Prisma Cloud - update to 3.2.533