CVE-2026-49876 Server-side request forgery in Apache Gravitino
Authenticated attackers can trigger server-side requests to internal networks or cloud metadata via unvalidated job template URIs in Apache Gravitino.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-49876?
CVE-2026-49876 is a medium-severity server-side request forgery vulnerability in Apache Gravitino, published on 13 Jul 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability in Apache Gravitino.
This issue affects Apache Gravitino: from 1.0.0 through 1.2.1.
Users are recommended to upgrade to version 1.3.0, which fixes the issue.
Weakness: CWE-918
Which versions are affected by CVE-2026-49876?
1 open source package ship an affected version, including apache-gravitino. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
apache-gravitino PyPI | From 1.0.0 | 1.3.0 |
Products include Apache Gravitino.
How do I fix CVE-2026-49876?
Upgrade apache-gravitino to 1.3.0 or later.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2026-49876 being exploited?
There is no known exploitation of CVE-2026-49876 in the wild and no public exploit code.
Other vulnerabilities in Apache Gravitino
Sources
Also known as GHSA-q28r-579j-9qxq, PYSEC-2026-3442.