CVE-2026-110719: Server-Side Request Forgery (SSRF) in Portkey-AI gateway

CVE-2026-110719 is a server-side request forgery vulnerability in Portkey AI Gateway versions 1.14.0 through 1.15.2. The vulnerability exists because the isValidCustomHost function implicitly trusts localhost-style hosts if the TRUSTED_CUSTOM_HOSTS environment variable is unset. This allows unauthenticated attackers to craft requests with a manipulated x-portkey-custom-host header, such as through the ollama provider, causing the gateway to make requests to internal loopback and Docker host services and return their responses. The CVSS 4.0 base score is 6.9, indicating a medium severity vulnerability with network attack vector, no privileges required, and no user interaction needed.

An unauthenticated attacker can exploit this SSRF vulnerability to make the Portkey AI Gateway access internal services on the loopback interface or Docker host. This can lead to unauthorized information disclosure from internal services that are normally inaccessible externally. The vulnerability does not require authentication or user interaction, increasing its risk. However, the impact is limited to information disclosure and does not include direct code execution or privilege escalation according to the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should ensure the TRUSTED_CUSTOM_HOSTS environment variable is properly set to restrict trusted hosts and avoid leaving it unset. Monitoring and restricting access to the /v1 endpoint and the x-portkey-custom-host header usage may help mitigate exploitation risk.