{"id":"CVE-2026-82270","summary":"Portkey AI Gateway Server-Side Request Forgery via /v1/proxy/*","details":"Portkey AI Gateway through 1.15.2 contains a server-side request forgery vulnerability in the /v1/proxy/* route that lacks requestValidator middleware. Attackers can set the x-portkey-custom-host header to internal addresses and forward requests with Authorization headers to reach internal services and exfiltrate provider API keys.","modified":"2026-09-01T03:30:53.965753611Z","published":"2026-08-28T16:18:53.484Z","database_specific":{"cna_assigner":"VulnCheck","cwe_ids":["CWE-918"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82270.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82270.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82270"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/portkey-ai-gateway-server-side-request-forgery-via-v1-proxy"},{"type":"REPORT","url":"https://github.com/Portkey-AI/gateway/issues/1718"},{"type":"PACKAGE","url":"https://github.com/Portkey-AI/gateway"},{"type":"ARTICLE","url":"https://github.com/Portkey-AI/gateway/blob/669825cbe89ee51569918b8f78a9db486fd69dd4/src/index.ts"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/portkey-ai/gateway","events":[{"introduced":"da1a1d04fe3578bdeafbbcbe035f278030f02cfb"},{"fixed":"ca7712947ec8c0887803990b746740d36011c697"}],"database_specific":{"source":["AFFECTED_FIELD","DESCRIPTION"],"extracted_events":[{"introduced":"1.14.0"},{"last_affected":"1.15.2"},{"introduced":"0"},{"fixed":"1.15.2"}]}}],"versions":["v1.15.1","v1.15.0","v1.14.3","v1.14.2","v1.14.0","v1.14.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82270.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"}]}