CVE-2026-85662: Server-Side Request Forgery (SSRF) in marqo-ai marqo

CVE-2026-85662 is a server-side request forgery vulnerability affecting marqo-ai's marqo product versions up to and including 2.26.0. The vulnerability exists in the add_documents endpoint, where unauthenticated attackers can supply malicious media field values to trigger requests to arbitrary URLs. The underlying issue is that the download_image_from_url and fetch_content_sample functions do not perform destination filtering or host validation, allowing attackers to reach internal network services and cloud metadata endpoints that should be protected.

An attacker exploiting this SSRF vulnerability can cause the marqo server to make unauthorized HTTP requests to internal or external systems. This can lead to unauthorized access to internal services and sensitive cloud metadata endpoints, potentially exposing sensitive information or enabling further attacks within the internal network. The vulnerability does not require authentication and has a medium severity score (CVSS 6.9).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to internal services and cloud metadata endpoints from the marqo server if possible. Monitor for unusual outbound requests from the server. Avoid exposing the add_documents endpoint to untrusted users.