CVE-2026-45568: OpenZiti zrok SSRF in Python SDK ProxyShare

CVE-2026-45568 · Severity: critical · CVSS 4 · Published 2026-07-16

zrok is a tool used to securely share web services and files across different networks. A security flaw in its Python integration allows an attacker to bypass the intended destination of a shared link and instead force the server to connect to arbitrary internal or external websites. This could lead to the exposure of sensitive internal data or allow the attacker to use the server as a jumping-off point for further attacks.

Technologies: OpenZiti Zrok. Vendors: OpenZiti, PyPI.

Quick answers

Is CVE-2026-45568 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-45568 being exploited in the wild.
How severe is CVE-2026-45568?
Critical severity, with a CVSS score of 4, published 16 July 2026.
Which products and versions are affected?
OpenZiti Zrok >= 0.4.47, < 2.0.3, >= 0.4.47, <= 1.1.11; zrok (PyPI) ECOSYSTEM:introduced=0.4.47,last_affected=1.1.11.
Is there a fix for CVE-2026-45568?
A patch was published on 2026-05-07: Fix committed in version 2.0.3 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-45568 attacked?
It is attacked over the network, in a software library.
Am I affected by CVE-2026-45568?
Check whether you run OpenZiti Zrok or zrok (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A Server-Side Request Forgery (SSRF) vulnerability exists in the zrok Python SDK's ProxyShare Flask route. The application accepts a user-provided path and processes it using 'urllib.parse.urljoin' against a configured target host. Because 'urljoin' treats an absolute URL (e.g., 'http://internal-service/') as a replacement for the base URL rather than a suffix, an attacker can provide an absolute URL in the request path to override the intended destination. This allows the attacker to proxy requests through the zrok share to arbitrary internal or loopback services, potentially bypassing network access controls. The issue is resolved in version 2.0.3 by rejecting absolute paths in the proxy handler.

Affected products

  • openziti zrok >= 0.4.47, < 2.0.3

Identifiers

  • CVE-2026-45568
  • GHSA-jh67-hwqw-m5r7
  • PYSEC-2026-577

Timeline

  • 2026-05-07: patched: Fix committed in version 2.0.3
  • 2026-05-13: advisory: GitHub Security Advisory GHSA-jh67-hwqw-m5r7 published
  • 2026-07-16: disclosed: CVE-2026-45568 published to NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.