CVE-2026-8768 vercel ai provider-utils download-blob.ts validateDownloadUrl server-side request forgery
A server-side request forgery vulnerability in the Vercel AI SDK allows remote attackers to interact with internal network resources via the download-blob utility.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-8768?
CVE-2026-8768 is a medium-severity server-side request forgery vulnerability in vercel ai, published on 17 May 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability was found in vercel ai up to 3.0.97. The affected element is the function validateDownloadUrl of the file packages/provider-utils/src/download-blob.ts of the component provider-utils. The manipulation results in server-side request forgery. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Weakness: CWE-918
Which versions are affected by CVE-2026-8768?
It affects 1 product.
Products include Vercel Ai.
How do I fix CVE-2026-8768?
No fix has been published for CVE-2026-8768 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2026-8768 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-8768 exists.
Other vulnerabilities in vercel ai
- CVE-2026-8769 vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption
- CVE-2025-48985 Vercel’s AI SDK's filetype whitelists can be bypassed when uploading files
- CVE-2026-8767 vercel ai PR Branch Name Interpolation prettier-on-automerge.yml run os command injection
Sources
Also known as GHSA-8rqj-9gxc-63cr.