CVE-2026-85699: Server-Side Request Forgery (SSRF) in jina-ai reader

The jina-ai reader component contains an SSRF vulnerability due to insufficient URL validation on redirect hops. While the initial URL is validated, subsequent redirects are not re-validated, enabling attackers to bypass restrictions by using public URLs that redirect to internal or sensitive endpoints. This can lead to unauthorized disclosure of internal network resources or cloud metadata. No known exploits are reported in the wild. The affected version is exactly version 0 of the reader product. No patch or remediation information is provided in the available data.

An attacker can exploit this SSRF vulnerability to cause the server to make unauthorized requests to internal network addresses or cloud metadata endpoints. This can result in disclosure of sensitive internal information or cloud instance metadata, potentially leading to further attacks or information leakage. The vulnerability does not require authentication or user interaction and has a high severity rating.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting outbound HTTP requests from the reader component or implementing additional URL validation on redirects as a temporary mitigation.