{"id":"CVE-2026-65057","summary":"Keep Unauthenticated Server-Side Request Forgery via POST /providers/healthcheck","details":"Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the backend issue arbitrary HTTP requests by supplying attacker-controlled host values to the unprotected healthcheck endpoint. Attackers can send a crafted JSON payload with a malicious host parameter to cause the backend to issue outbound requests to internal services or cloud metadata endpoints, enabling theft of cloud credentials and internal network reconnaissance.","modified":"2026-10-28T02:30:56.650073378Z","published":"2026-07-21T20:56:10.062Z","database_specific":{"cna_assigner":"VulnCheck","cwe_ids":["CWE-918"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65057.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65057.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65057"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/keep-unauthenticated-server-side-request-forgery-via-post-providers-healthcheck"},{"type":"REPORT","url":"https://github.com/keephq/keep/issues/6630"},{"type":"FIX","url":"https://github.com/keephq/keep"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/keephq/keep","events":[{"introduced":"0"},{"last_affected":"91c75e0"}],"database_specific":{"extracted_events":[{"range":[{"introduced":"0"},{"last_affected":"91c75e0"}],"source":"AFFECTED_FIELD","strategy":"StandardRange"}]}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-65057.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N"}]}