CVE-2026-8768
Status: AnalyzedMedium (5.5)—
A vulnerability was found in vercel ai up to 3.0.97. The affected element is the function validateDownloadUrl of the file packages/provider-utils/src/download-blob.ts of the component provider-utils. The manipulation results in server-side request forgery. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS
- Version: 4.0
- Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Base score: 5.5
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 0.69%
- Percentile among all scored CVEs: 51
- Score date: 10/4/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- CWE-918
References
Raw JSON (NVD)
Show
{
"id": "CVE-2026-8768",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-8768",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "poc"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2026-05-18T10:28:23.079110Z"
}
}
],
"cvssMetricV2": [
{
"type": "Secondary",
"source": "cna@vuldb.com",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "cna@vuldb.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.3,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"integrityImpact": "LOW",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "LOW",
"privilegesRequired": "NONE",
"confidentialityImpact": "LOW"
},
"impactScore": 3.4,
"exploitabilityScore": 3.9
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.3,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"integrityImpact": "LOW",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "LOW",
"privilegesRequired": "NONE",
"confidentialityImpact": "LOW"
},
"impactScore": 3.4,
"exploitabilityScore": 3.9
}
],
"cvssMetricV40": [
{
"type": "Secondary",
"source": "cna@vuldb.com",
"cvssData": {
"Safety": "NOT_DEFINED",
"version": "4.0",
"Recovery": "NOT_DEFINED",
"baseScore": 5.5,
"Automatable": "NOT_DEFINED",
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"exploitMaturity": "PROOF_OF_CONCEPT",
"providerUrgency": "NOT_DEFINED",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"subIntegrityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"integrityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"vulnAvailabilityImpact": "LOW",
"availabilityRequirement": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"subConfidentialityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"confidentialityRequirement": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED"
}
}
]
},
"affected": [
{
"source": "cna@vuldb.com",
"affectedData": [
{
"cpes": [
"cpe:2.3:a:vercel:ai:*:*:*:*:*:*:*:*"
],
"vendor": "vercel",
"modules": [
"provider-utils"
],
"product": "ai",
"versions": [
{
"status": "affected",
"version": "3.0.0"
},
{
"status": "affected",
"version": "3.0.1"
},
{
"status": "affected",
"version": "3.0.2"
},
{
"status": "affected",
"version": "3.0.3"
},
{
"status": "affected",
"version": "3.0.4"
},
{
"status": "affected",
"version": "3.0.5"
},
{
"status": "affected",
"version": "3.0.6"
},
{
"status": "affected",
"version": "3.0.7"
},
{
"status": "affected",
"version": "3.0.8"
},
{
"status": "affected",
"version": "3.0.9"
},
{
"status": "affected",
"version": "3.0.10"
},
{
"status": "affected",
"version": "3.0.11"
},
{
"status": "affected",
"version": "3.0.12"
},
{
"status": "affected",
"version": "3.0.13"
},
{
"status": "affected",
"version": "3.0.14"
},
{
"status": "affected",
"version": "3.0.15"
},
{
"status": "affected",
"version": "3.0.16"
},
{
"status": "affected",
"version": "3.0.17"
},
{
"status": "affected",
"version": "3.0.18"
},
{
"status": "affected",
"version": "3.0.19"
},
{
"status": "affected",
"version": "3.0.20"
},
{
"status": "affected",
"version": "3.0.21"
},
{
"status": "affected",
"version": "3.0.22"
},
{
"status": "affected",
"version": "3.0.23"
},
{
"status": "affected",
"version": "3.0.24"
},
{
"status": "affected",
"version": "3.0.25"
},
{
"status": "affected",
"version": "3.0.26"
},
{
"status": "affected",
"version": "3.0.27"
},
{
"status": "affected",
"version": "3.0.28"
},
{
"status": "affected",
"version": "3.0.29"
},
{
"status": "affected",
"version": "3.0.30"
},
{
"status": "affected",
"version": "3.0.31"
},
{
"status": "affected",
"version": "3.0.32"
},
{
"status": "affected",
"version": "3.0.33"
},
{
"status": "affected",
"version": "3.0.34"
},
{
"status": "affected",
"version": "3.0.35"
},
{
"status": "affected",
"version": "3.0.36"
},
{
"status": "affected",
"version": "3.0.37"
},
{
"status": "affected",
"version": "3.0.38"
},
{
"status": "affected",
"version": "3.0.39"
},
{
"status": "affected",
"version": "3.0.40"
},
{
"status": "affected",
"version": "3.0.41"
},
{
"status": "affected",
"version": "3.0.42"
},
{
"status": "affected",
"version": "3.0.43"
},
{
"status": "affected",
"version": "3.0.44"
},
{
"status": "affected",
"version": "3.0.45"
},
{
"status": "affected",
"version": "3.0.46"
},
{
"status": "affected",
"version": "3.0.47"
},
{
"status": "affected",
"version": "3.0.48"
},
{
"status": "affected",
"version": "3.0.49"
},
{
"status": "affected",
"version": "3.0.50"
},
{
"status": "affected",
"version": "3.0.51"
},
{
"status": "affected",
"version": "3.0.52"
},
{
"status": "affected",
"version": "3.0.53"
},
{
"status": "affected",
"version": "3.0.54"
},
{
"status": "affected",
"version": "3.0.55"
},
{
"status": "affected",
"version": "3.0.56"
},
{
"status": "affected",
"version": "3.0.57"
},
{
"status": "affected",
"version": "3.0.58"
},
{
"status": "affected",
"version": "3.0.59"
},
{
"status": "affected",
"version": "3.0.60"
},
{
"status": "affected",
"version": "3.0.61"
},
{
"status": "affected",
"version": "3.0.62"
},
{
"status": "affected",
"version": "3.0.63"
},
{
"status": "affected",
"version": "3.0.64"
},
{
"status": "affected",
"version": "3.0.65"
},
{
"status": "affected",
"version": "3.0.66"
},
{
"status": "affected",
"version": "3.0.67"
},
{
"status": "affected",
"version": "3.0.68"
},
{
"status": "affected",
"version": "3.0.69"
},
{
"status": "affected",
"version": "3.0.70"
},
{
"status": "affected",
"version": "3.0.71"
},
{
"status": "affected",
"version": "3.0.72"
},
{
"status": "affected",
"version": "3.0.73"
},
{
"status": "affected",
"version": "3.0.74"
},
{
"status": "affected",
"version": "3.0.75"
},
{
"status": "affected",
"version": "3.0.76"
},
{
"status": "affected",
"version": "3.0.77"
},
{
"status": "affected",
"version": "3.0.78"
},
{
"status": "affected",
"version": "3.0.79"
},
{
"status": "affected",
"version": "3.0.80"
},
{
"status": "affected",
"version": "3.0.81"
},
{
"status": "affected",
"version": "3.0.82"
},
{
"status": "affected",
"version": "3.0.83"
},
{
"status": "affected",
"version": "3.0.84"
},
{
"status": "affected",
"version": "3.0.85"
},
{
"status": "affected",
"version": "3.0.86"
},
{
"status": "affected",
"version": "3.0.87"
},
{
"status": "affected",
"version": "3.0.88"
},
{
"status": "affected",
"version": "3.0.89"
},
{
"status": "affected",
"version": "3.0.90"
},
{
"status": "affected",
"version": "3.0.91"
},
{
"status": "affected",
"version": "3.0.92"
},
{
"status": "affected",
"version": "3.0.93"
},
{
"status": "affected",
"version": "3.0.94"
},
{
"status": "affected",
"version": "3.0.95"
},
{
"status": "affected",
"version": "3.0.96"
},
{
"status": "affected",
"version": "3.0.97"
}
]
}
]
}
],
"published": "2026-05-17T23:17:02.997",
"references": [
{
"url": "https://gist.github.com/YLChen-007/07d149bd68adbee58165b4207a2abc71",
"tags": [
"Not Applicable"
],
"source": "cna@vuldb.com"
},
{
"url": "https://gist.github.com/YLChen-007/cf7e47e4dda392f474ca77a66d1d847f",
"tags": [
"Exploit",
"Third Party Advisory"
],
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/submit/811404",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/submit/811405",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/vuln/364393",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/vuln/364393/cti",
"tags": [
"Permissions Required",
"VDB Entry"
],
"source": "cna@vuldb.com"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "cna@vuldb.com",
"description": [
{
"lang": "en",
"value": "CWE-918"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in vercel ai up to 3.0.97. The affected element is the function validateDownloadUrl of the file packages/provider-utils/src/download-blob.ts of the component provider-utils. The manipulation results in server-side request forgery. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"lastModified": "2026-06-17T11:04:25.987",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:vercel:ai:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9C80CA5C-3BEC-499F-85D5-5E81491D37D6",
"versionEndIncluding": "3.0.97"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cna@vuldb.com"
}