CVE-2026-85686: Server-Side Request Forgery (SSRF) in modelscope ms-swift

The vulnerability in modelscope ms-swift (<=4.5.2) involves the swift deploy API accepting unvalidated media URL parameters (image_url, audio_url, video_url). This lack of validation enables unauthenticated attackers to perform SSRF attacks by forcing the server to issue requests to internal network resources or cloud metadata services. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality.

An attacker can exploit this SSRF vulnerability to make the vulnerable server send requests to internal services or cloud metadata endpoints. This can lead to unauthorized information disclosure or further internal network reconnaissance. The vulnerability does not require authentication, increasing the risk of exploitation. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix link is provided, users should monitor the vendor's advisories for updates. Until a fix is available, restrict access to the vulnerable API and implement network-level controls to limit server outbound requests to trusted destinations.