CVE-2026-15508— Helicone ai-gateway AWS Metadata Service service.rs build_target_url server-side request forgery

CVSS 6.3 · Medium EPSS 0.33% · P25 Updated Jul 14, 2026

Possible ATT&CK Techniques 1AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 31

Vendor	Product	Version Range	Status
Helicone	ai-gateway	`0.2.0-beta.0`	affected
		`0.2.0-beta.1`	affected
		`0.2.0-beta.2`	affected
		`0.2.0-beta.3`	affected
		`0.2.0-beta.4`	affected
		`0.2.0-beta.5`	affected
		`0.2.0-beta.6`	affected
		`0.2.0-beta.7`	affected
… +23 more rows

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-15508

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Helicone ai-gateway AWS Metadata Service service.rs build_target_url server-side request forgery

Source: NVD (National Vulnerability Database)

Vulnerability Description

A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30. This affects the function build_target_url of the file ai-gateway/src/dispatcher/service.rs of the component AWS Metadata Service. Executing a manipulation of the argument extracted_path_and_query can lead to server-side request forgery. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Source: NVD (National Vulnerability Database)

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Source: NVD (National Vulnerability Database)

Vulnerability Type

服务端请求伪造(SSRF)

Source: NVD (National Vulnerability Database)

Vulnerability Title

Helicone AI Gateway 服务端请求伪造漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Helicone Helicone AI Gateway是Helicone公司的一款AI网关产品。 Helicone AI Gateway 0.2.0-beta.30及之前版本存在服务端请求伪造漏洞，该漏洞源于ai-gateway/src/dispatcher/service.rs文件中build_target_url函数对extracted_path_and_query参数操作不当，可能导致服务端请求伪造。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Helicone	ai-gateway	0.2.0-beta.0	`cpe:2.3:a:helicone:ai-gateway::::::::`

II. Public POCs for CVE-2026-15508

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2026-15508

请登录查看更多情报信息。

Proof of Concept for CVE-2026-15508 (1)

🔗 Helicone ai-gateway - SSRF via Provider Base URL Manipulation · Issue #1 · oscar2744/CVE-Submit Read full article exploitissue-tracking

https://nvd.nist.gov/vuln/detail/CVE-2026-15508

IV. Related Vulnerabilities

Same weakness: CWE-918

V. Comments for CVE-2026-15508

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2026-15508— Helicone ai-gateway AWS Metadata Service service.rs build_target_url server-side request forgery

Possible ATT&CK Techniques 1AI

Affected Version Matrix 31

I. Basic Information for CVE-2026-15508

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2026-15508

III. Intelligence Information for CVE-2026-15508

Proof of Concept for CVE-2026-15508 (1)

IV. Related Vulnerabilities

V. Comments for CVE-2026-15508

Leave a comment