{
 "id": "AIR-2026-0325",
 "slug": "portkey-ai-gateway-server-side-request-forgery-vulnerability",
 "title": "Portkey AI Gateway Server-Side Request Forgery Vulnerability",
 "summary": "Portkey AI Gateway contains an SSRF vulnerability enabling unauthenticated attackers to query loopback and Docker host services via crafted custom host headers. Users are advised to update their gateway instances.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Portkey AI Gateway"
 ],
 "incident_date": "2026-10-14",
 "incident_date_precision": "day",
 "first_reported": "2026-10-14",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110719",
   "publisher": "NVD",
   "title": "CVE-2026-110719: Portkey AI Gateway 1.14.0 through 1.15.2 contains a server-side request forgery vulnerability that allows unauthenticated…",
   "published_at": "2026-10-14"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-110719",
  "ssrf",
  "portkey"
 ],
 "created_at": "2026-10-18T06:33:31.967Z",
 "updated_at": "2026-10-18T06:33:31.967Z"
}