QuantumNous new-api (versions up to 0.11.9-alpha.1) contains an SSRF vulnerability due to incomplete filtering of the unspecified IP address 0.0.0.0. This allows authenticated users with any valid API token to bypass private IP filters by specifying 0.0.0.0 as the host in multimodal requests to certain API endpoints. The server then issues HTTP requests to localhost, potentially exposing internal resources. When requests are processed through an AWS/Bedrock Claude adaptor, the vulnerability escalates to a full-read SSRF by inlining fetched content into AI model responses. The vulnerability is tracked as CVE-2026-42339 with a CVSS 4.0 score of 7.1 (high severity). The product is cloud-hosted, and vendor-managed remediation is expected, though no detailed patch information is currently public.

The vulnerability enables authenticated users with any valid API token to induce the server to make HTTP requests to localhost by specifying 0.0.0.0 as the target host. This can lead to blind SSRF attacks, potentially allowing attackers to interact with internal services not normally accessible externally. When integrated with the AWS/Bedrock Claude adaptor, the attack can escalate to full-read SSRF, where the attacker can obtain the content fetched by the server and have it included in AI model responses. This could expose sensitive internal data or services. No known exploits are reported in the wild at the time of publication.

Since the product is a cloud service, remediation is managed by the vendor. Although a patch is indicated as available, no public patch details or official fixes are currently provided. Security teams should monitor vendor advisories for updates and apply patches or mitigations as soon as they become available. In the interim, review API token usage and restrict token distribution to trusted users to reduce risk exposure.