# CVE-2026-61835: Directus SSRF bypass in file import via 0.0.0.0 address

Source: https://junglewise.ai/threats/cve-2026-61835-directus-ssrf-bypass-in-file-import-via-0-0-0-0-address  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-15. Updated: 2026-07-20  
License: CC BY 4.0 with a link back

CVE-2026-61835 · Severity: high · CVSS 7.7 · Published 2026-07-15

Directus, an open-source data platform, is vulnerable to a security flaw in its file import feature. An authorized user can bypass internal security restrictions to make the server connect to its own internal services or other private resources on the same network. This could allow an attacker to steal sensitive data from internal databases or APIs that are not supposed to be accessible from the internet.

Technologies: [directus (npm)](https://junglewise.ai/threats/technologies/directus). Vendors: [npm](https://junglewise.ai/threats/vendors/npm).

## Quick answers

**Is CVE-2026-61835 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-61835 being exploited in the wild.

**How severe is CVE-2026-61835?** High severity, with a CVSS score of 7.7, published 15 July 2026.

**Which products and versions are affected?** directus (npm) < 12.0.0, SEMVER:introduced=0,fixed=12.0.0.

**Is there a fix for CVE-2026-61835?** Yes. directus (npm): upgrade to 12.0.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-61835 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-61835?** Check whether you run directus (npm) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- directus (npm): upgrade to 12.0.0 or later

  ```sh
  npm install directus@12.0.0
  ```


## Technical details

A Server-Side Request Forgery (SSRF) vulnerability exists in Directus due to an incomplete IP blocklist in the file-import-from-URL feature. While the system attempts to block local network interfaces, the validation logic in 'api/src/request/is-denied-ip.ts' fails to explicitly block the literal address '0.0.0.0' (and '::' in IPv6). On Linux and macOS systems, '0.0.0.0' is treated as localhost, allowing an authenticated attacker with file-upload permissions to bypass the 'IMPORT_IP_DENY_LIST'. This results in a full-read SSRF where the server fetches content from internal services and stores the response as a downloadable file. The issue is patched in version 12.0.0.

## Affected products

- Directus Directus < 12.0.0

## Identifiers

- CVE-2026-61835
- GHSA-j5h6-vqc3-phqh

## Timeline

- 2026-06-24: disclosed: Initial disclosure on GitHub
- 2026-07-15: advisory: NVD publication date
- 2026-07-20: advisory: GitHub Advisory reviewed and updated

## References

- [https://api.github.com/users/kakarotsec](https://api.github.com/users/kakarotsec)
- [https://github.com/kakarotsec](https://github.com/kakarotsec)
- [https://api.github.com/users/kakarotsec/gists%7B/gist_id%7D](https://api.github.com/users/kakarotsec/gists%7B/gist_id%7D)
- [https://api.github.com/users/kakarotsec/repos](https://api.github.com/users/kakarotsec/repos)
- [https://avatars.githubusercontent.com/u/45924460?v=4](https://avatars.githubusercontent.com/u/45924460?v=4)
- [https://api.github.com/users/kakarotsec/events%7B/privacy%7D](https://api.github.com/users/kakarotsec/events%7B/privacy%7D)

## Related threats

- [Directus authorization bypass via unsegmented response cache key](https://junglewise.ai/threats/cve-2026-61836-directus-authorization-bypass-via-unsegmented-response-cache-key)
- [Directus sensitive information disclosure via aggregate queries](https://junglewise.ai/threats/cve-2026-35442-directus-sensitive-information-disclosure-via-aggregate-queries)
- [Directus resource exhaustion via GraphQL alias amplification](https://junglewise.ai/threats/cve-2026-35441-directus-resource-exhaustion-via-graphql-alias-amplification)
- [Directus GraphQL introspection bypass in system endpoint](https://junglewise.ai/threats/cve-2026-35413-directus-graphql-introspection-bypass-in-system-endpoint)
- [Directus authorization bypass in TUS resumable upload endpoint](https://junglewise.ai/threats/cve-2026-35412-directus-authorization-bypass-in-tus-resumable-upload-endpoint)