Is CVE-2026-86539 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-86539 being exploited in the wild.

How severe is CVE-2026-86539?

High severity, with a CVSS score of 7.2, published 7 September 2026.

Is there a fix for CVE-2026-86539?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-86539 attacked?

It is attacked over the network, in a hosted service.

Am I affected by CVE-2026-86539?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-86539: knowns server-side request forgery in embedding model test endpoint

CVE-2026-86539 · Severity: high · CVSS 7.2 · Published 2026-09-07

knowns is an open-source platform for managing and querying data embeddings. A vulnerability in the embedding model testing endpoint allows attackers to make the server send requests to arbitrary network destinations, enabling them to probe internal networks and cloud metadata services. This could expose sensitive internal infrastructure information and compromise cloud credentials.

Quick answers

Is CVE-2026-86539 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-86539 being exploited in the wild.
How severe is CVE-2026-86539?: High severity, with a CVSS score of 7.2, published 7 September 2026.
Which products and versions are affected?: knowns knowns through 0.33.0.
Is there a fix for CVE-2026-86539?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-86539 attacked?: It is attacked over the network, in a hosted service.
Am I affected by CVE-2026-86539?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is a server-side request forgery (SSRF) in the POST /api/embedding-models/test endpoint, which accepts caller-supplied URLs and issues outbound HTTP requests without proper validation. An attacker can enumerate internal hosts and cloud metadata endpoints (e.g., AWS metadata services) by observing transport error messages that reveal network reachability. The vulnerability requires only network access to the endpoint; no authentication is explicitly mentioned as a prerequisite. An attacker can map internal network topology and potentially retrieve sensitive metadata. Patches should implement URL validation to block requests to private IP ranges and cloud metadata endpoints.

Affected products

knowns knowns through 0.33.0

Timeline

2026-09-07: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.