Zilliz Attu before version 3.0.0 contains a vulnerability (CVE-2026-105048) in its Playground feature that permits SSRF attacks by proxying requests to private IP addresses. The root cause is improper validation of unsafe equivalence in input (CWE-1289). The vulnerability has a CVSS 3.1 base score of 4.0, indicating medium severity, with network attack vector, high attack complexity, no privileges required, no user interaction, and a scope change. The impact is limited to integrity loss without confidentiality or availability impact. The affected versions are >=2.6.5 and <3.0.0. There is no vendor advisory or patch information available at this time.

An attacker can exploit the SSRF vulnerability to cause the server to make unauthorized requests to internal or private IP addresses. This can lead to limited integrity impact, such as influencing internal services or data, but does not affect confidentiality or availability according to the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the Playground feature or implement network-level controls to prevent unauthorized SSRF requests to private IP ranges.