Executive brief
Marqo is an open-source search and discovery platform used for e-commerce indexing and retrieval. A vulnerability in its document upload feature allows attackers without credentials to force the server to make network requests to arbitrary URLs, potentially exposing internal services, databases, and cloud metadata endpoints. This could lead to unauthorized access to sensitive internal infrastructure.
Technical details
The vulnerability is a server-side request forgery (SSRF) in the add_documents endpoint of Marqo 2.26.0. The vulnerable code exists in the image_download.py component, specifically in the download_image_from_url and fetch_content_sample functions, which lack destination URL validation and host filtering. An unauthenticated attacker can exploit this by supplying malicious URLs in the media field of a document addition request, causing the server to issue HTTP requests to arbitrary destinations including internal IP addresses and cloud metadata services (e.g., 169.254.169.254). No authentication is required to trigger the vulnerability. A patch addressing the missing host validation is available in newer versions.
Affected products
- Marqo Marqo 2.26.0
Timeline
- 2026-09-04: disclosed
- 2026-09-04: advisory: CVE-2026-85662 published