CVE-2026-55412 ToolJet Cloud - SSRF to Azure Cloud Infrastructure Compromise
Authenticated users can exploit SSRF in the RestAPI data source to steal Azure managed identity tokens, compromising cloud infrastructure.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-55412?
CVE-2026-55412 is a high-severity server-side request forgery vulnerability in ToolJet, published on 25 Jun 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agents. Prior to 3.20.178-lts, there's an SSRF in the RestAPI data source component. The RestAPI data source executes HTTP requests server-side, and its private IP filter only checks the hostname string — not the resolved IP. DNS names like 169.254.169.254.nip.io resolve to the Azure IMDS link-local address and bypass the filter entirely. This allows any authenticated user (free tier) to steal Azure managed identity tokens for the AKS production cluster. This vulnerability is fixed in 3.20.178-lts.
Weakness: CWE-918
Which versions are affected by CVE-2026-55412?
How do I fix CVE-2026-55412?
No fix has been published for CVE-2026-55412 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2026-55412 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-55412 exists.
Sources
Also known as GHSA-h49f-mhmm-jx4w.