CVE-2026-45806 Penpot: Authenticated SSRF in remote image import via create-file-media-object-from-url
An authenticated user can exploit a Server-Side Request Forgery vulnerability in Penpot to access internal network resources via remote image import.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-45806?
CVE-2026-45806 is a high-severity server-side request forgery vulnerability in penpot, published on 15 Jul 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Penpot is an open-source design tool for design and code collaboration. Prior to 2.15.0, Penpot's remote image import passed the user-controlled url from frontend/src/app/main/data/workspace/media.cljs into the backend RPC method :create-file-media-object-from-url in backend/src/app/rpc/commands/media.clj, where media/download-image in backend/src/app/media.clj used the shared HTTP client without destination filtering, allowing an authenticated file editor to reach internal-only endpoints. This issue is fixed in version 2.15.0.
Weakness: CWE-918
Which versions are affected by CVE-2026-45806?
How do I fix CVE-2026-45806?
No fix has been published for CVE-2026-45806 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2026-45806 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-45806 exists.
Public exploit code: 1 proofs of concept on GitHub.
Sources
Also known as GHSA-35g2-w7f6-8v9h.