Executive brief
mistral.rs Media Loader: Unauthenticated SSRF and arbitrary local file read via image_url
Affected products
- crates.io mistralrs-server-core
Junglewise Threat Intelligence
mistral.rs Media Loader: Unauthenticated SSRF and arbitrary local file read via image_url
Severity: low · CVSS 3.1 · Published 2026-09-10
Technologies: mistralrs-server-core (crates.io). Vendors: crates.io.