# CVE-2024-46990: Directus SSRF loopback IP filter bypass

Source: https://junglewise.ai/threats/cve-2024-46990-directus-ssrf-loopback-ip-filter-bypass  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2024-09-18. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2024-46990 · Severity: low · CVSS 3.1 · Published 2024-09-18

Directus is an open-source headless CMS that provides data access control features to prevent certain network requests. The default security filter can be bypassed to access loopback addresses (localhost services) by using alternative loopback IP addresses like 127.0.0.2 instead of the typically-blocked 127.0.0.1, potentially exposing internal services to authenticated attackers.

Technologies: [@directus/api (npm)](https://junglewise.ai/threats/technologies/directus-api), [directus (npm)](https://junglewise.ai/threats/technologies/directus). Vendors: [npm](https://junglewise.ai/threats/vendors/npm).

## Quick answers

**Is CVE-2024-46990 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2024-46990 being exploited in the wild.

**How severe is CVE-2024-46990?** Low severity, with a CVSS score of 3.1, published 18 September 2024.

**Which products and versions are affected?** @directus/api (npm) SEMVER:introduced=0,fixed=21.0.0; directus (npm) SEMVER:introduced=0,fixed=10.13.3.

**Is there a fix for CVE-2024-46990?** Yes. @directus/api (npm): upgrade to 21.0.0 or later; directus (npm): upgrade to 10.13.3 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2024-46990 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2024-46990?** Check whether you run @directus/api (npm) or directus (npm) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- @directus/api (npm): upgrade to 21.0.0 or later

  ```sh
  npm install @directus/api@21.0.0
  ```

- directus (npm): upgrade to 10.13.3 or later

  ```sh
  npm install directus@10.13.3
  ```


## Technical details

This is a Server-Side Request Forgery (SSRF) filter bypass vulnerability stemming from insufficient IP range validation. The vulnerability affects Directus's default 0.0.0.0 filter configuration, which only blocks 127.0.0.1 but fails to block the entire 127.0.0.0/8 loopback range (127.0.0.2–127.127.127.127). An authenticated attacker can exploit this by crafting requests to alternative loopback IPs to access internal services. The vulnerability requires authentication (PR:L) and network-level access, affecting confidentiality through potential exposure of internal service data. Patches are available in Directus 10.13.3, 11.1.0, and later versions; as a workaround, administrators can manually add the 127.0.0.0/8 CIDR range to their filter configuration.

## Affected products

- Directus Directus ≤ 10.13.2; 11.0.0–11.0.x
- Directus @directus/api < 21.0.0; 22.0.0–22.1.0

## Identifiers

- CVE-2024-46990
- GHSA-68g8-c275-xf2m

## Timeline

- 2024-09-18: disclosed
- 2024-09-18: patched: Directus 10.13.3, 11.1.0, @directus/api 21.0.0, 22.1.1

## References

- [https://github.com/directus/directus/security/advisories/GHSA-68g8-c275-xf2m](https://github.com/directus/directus/security/advisories/GHSA-68g8-c275-xf2m)

## Related threats

- [Directus authorization bypass via unsegmented response cache key](https://junglewise.ai/threats/cve-2026-61836-directus-authorization-bypass-via-unsegmented-response-cache-key)
- [Directus SSRF bypass in file import via 0.0.0.0 address](https://junglewise.ai/threats/cve-2026-61835-directus-ssrf-bypass-in-file-import-via-0-0-0-0-address)
- [Directus sensitive information disclosure via aggregate queries](https://junglewise.ai/threats/cve-2026-35442-directus-sensitive-information-disclosure-via-aggregate-queries)
- [Directus resource exhaustion via GraphQL alias amplification](https://junglewise.ai/threats/cve-2026-35441-directus-resource-exhaustion-via-graphql-alias-amplification)
- [Directus GraphQL introspection bypass in system endpoint](https://junglewise.ai/threats/cve-2026-35413-directus-graphql-introspection-bypass-in-system-endpoint)