CVE-2026-27350: CWE-918 Server-Side Request Forgery (SSRF) in Builderius.io Builderius

This vulnerability (CVE-2026-27350) in Builderius.io Builderius is classified as CWE-918 (Server-Side Request Forgery). It affects versions >=1.4 and <=1.4-beta. The flaw allows an unauthenticated attacker to cause the server to send crafted requests to internal or external resources, potentially leading to partial confidentiality and integrity compromise. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and scope changed, with low confidentiality and integrity impact and no availability impact.

An attacker exploiting this SSRF vulnerability can cause the server to make arbitrary requests, which may lead to limited information disclosure and modification of data integrity. There is no direct impact on availability. The vulnerability requires no privileges or user interaction, increasing its risk. However, no known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor Builderius.io communications for updates. Until a fix is available, consider restricting server outbound requests or applying network-level controls to limit SSRF attack surface.