CVE-2026-67346

HIGH

Swarms 6.8.1 Server-Side Request Forgery via DNS Rebinding Bypass

Title source: cna
STIX 2.1

Description

Swarms through 6.8.1, fixed in commit 8b0fc9e, contains a server-side request forgery vulnerability in the _is_safe_url function that fails to validate hostnames through DNS resolution, allowing attackers to bypass the blocklist. Attackers can supply user-controlled image or audio URLs that resolve to private, loopback, or metadata addresses to reach internal services and exfiltrate credentials.

References (4)

Core 4
Core References
Technical Description technical-description
Researcher Disclosure
https://github.com/kyegomez/swarms/issues/1714
Issue Tracking issue-tracking
Pull Request
https://github.com/kyegomez/swarms/pull/1734

Scores

CVSS v3 8.6
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-918
Status published
Products (2)
kyegomez/swarms < 6.8.1
kyegomez/swarms 8b0fc9e4645603ad94d5fcf4da86e3b9c71f4743
Published Jul 30, 2026
Tracked Since Jul 30, 2026