CVE-2026-112288: Server-Side Request Forgery (SSRF) in krayin laravel-crm
Description
Krayin laravel-crm versions 2.2.5 and 2.2.6 contain a server-side request forgery (SSRF) vulnerability that allows users with webhook permissions to bypass request filtering via DNS rebinding. This enables attackers to send blind requests to internal services and cloud metadata endpoints by manipulating DNS resolution during webhook validation and subsequent HTTP requests.
CVSS v4.0
Score 2.1low
Affected software
krayin
laravel-crm
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-112288 is an SSRF vulnerability in Krayin laravel-crm affecting versions 2.2.5 and 2.2.6. The flaw arises because the WebhookService::isSafeEndpoint() method validates webhook URLs by resolving a public address, but the HTTP client (Guzzle) re-resolves the hostname and may obtain an internal address due to DNS rebinding. This discrepancy allows an attacker with webhook permissions to bypass endpoint safety checks and send requests to internal network resources or cloud metadata services.
Potential Impact
An attacker with webhook permissions can exploit this vulnerability to send unauthorized requests to internal network services and cloud metadata endpoints, potentially exposing sensitive internal information or enabling further attacks. The CVSS score is low (2.1), indicating limited impact and complexity, requiring high privileges (webhook permissions) and user interaction.
Mitigation Recommendations
No explicit patch or remediation details are provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict webhook permissions to trusted users only and monitor webhook configurations carefully to reduce risk.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-10-19T13:25:33.179Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ad626e32cdf04f6565e671f
Added to database: 10/19/2026, 14:19:15 UTC
Last enriched: 10/19/2026, 14:33:58 UTC
Last updated: 10/19/2026, 19:06:47 UTC
Views: 10
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.