CVE-2026-7065

HIGH

BidingCC BuildingAI Remote Upload API file-storage.service.ts uploadRemoteFile server-side request forgery

Title source: cna
STIX 2.1

Description

A vulnerability has been found in BidingCC BuildingAI up to 26.0.1. Impacted is the function uploadRemoteFile of the file packages/core/src/modules/upload/services/file-storage.service.ts of the component Remote Upload API. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

References (5)

Core 5
Core References
Exploit exploit issue-tracking
https://github.com/BidingCC/BuildingAI/issues/110
Vdb Entry, Technical Description vdb-entry technical-description
VDB-359640 | BidingCC BuildingAI Remote Upload API file-storage.service.ts uploadRemoteFile server-side request forgery
https://vuldb.com/vuln/359640
Signature, Permissions Required signature permissions-required
VDB-359640 | CTI Indicators (IOB, IOC, IOA)
https://vuldb.com/vuln/359640/cti
Third Party Advisory third-party-advisory
Submit #798621 | BidingCC BuildingAI 26.0.1 Server-Side Request Forgery
https://vuldb.com/submit/798621

Scores

CVSS v3 7.3
EPSS 0.0029
EPSS Percentile 20.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-918
Status published
Products (2)
BidingCC/BuildingAI 26.0.0
BidingCC/BuildingAI 26.0.1
Published Apr 27, 2026
Tracked Since Apr 27, 2026