Executive brief
Directus, an open-source data platform, is vulnerable to a security flaw in its file import feature. An authorized user can bypass internal security restrictions to make the server connect to its own internal services or other private resources on the same network. This could allow an attacker to steal sensitive data from internal databases or APIs that are not supposed to be accessible from the internet.
Technical details
A Server-Side Request Forgery (SSRF) vulnerability exists in Directus due to an incomplete IP blocklist in the file-import-from-URL feature. While the system attempts to block local network interfaces, the validation logic in 'api/src/request/is-denied-ip.ts' fails to explicitly block the literal address '0.0.0.0' (and '::' in IPv6). On Linux and macOS systems, '0.0.0.0' is treated as localhost, allowing an authenticated attacker with file-upload permissions to bypass the 'IMPORT_IP_DENY_LIST'. This results in a full-read SSRF where the server fetches content from internal services and stores the response as a downloadable file. The issue is patched in version 12.0.0.
Affected products
- Directus Directus < 12.0.0
Timeline
- 2026-06-24: disclosed: Initial disclosure on GitHub
- 2026-07-15: advisory: NVD publication date
- 2026-07-20: advisory: GitHub Advisory reviewed and updated