This vulnerability (CVE-2026-80464) is classified as CWE-918 (Server-Side Request Forgery) in HAVELSAN Inc.'s Sef - AI Chatbot Platform. It affects all versions from 0 up to but not including 2.1. The flaw allows an attacker with high privileges to induce the server to send crafted requests, potentially leading to unauthorized access to internal resources. The CVSS 3.1 base score is 4.9 with vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N, indicating network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, high confidentiality impact, no integrity or availability impact.

The vulnerability allows an attacker with high privileges to perform SSRF attacks, potentially exposing sensitive internal information or systems by making the server send unauthorized requests. Confidentiality impact is high, but integrity and availability are not affected. There are no known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, monitor HAVELSAN Inc.'s advisories for updates. Until a fix is available, restrict access to the affected platform to trusted users with high privileges to reduce risk.