Loading vulnerability…
SSRF and Local File Read in guardrails-detectors file_type Detector
CVE-2026-15143 affects the file_type content detector in guardrails-detectors, including affected Red Hat OpenShift AI components. The detector processes attacker-supplied XML Schema Definition (XSD) strings without adequate restrictions, allowing remote attackers to induce server-side requests to arbitrary URLs or read local files. Successful exploitation can disclose sensitive information, including cloud provider credentials, and expose internal network services.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Exploitation can compromise the confidentiality of files accessible to the detector process and information available through server-reachable endpoints. Potential consequences include disclosure of cloud provider credentials and unauthorized access to internal network services. The assigned CVSS v3.1 vector indicates high confidentiality impact, low integrity impact, and no availability impact.
If you can’t patch tonight, do this now.
If immediate patching is not possible, restrict or disable processing of untrusted XSD input in the affected file_type detector path. Prevent the vulnerable service from making outbound requests to untrusted destinations, limit its access to internal network resources, and run it with minimal filesystem and cloud metadata access. Network egress controls, metadata service protections, and least-privilege execution can reduce exposure until fixes are deployed.
Patch, then assume compromise.
Apply the vendor-provided fixes for the affected guardrails-detectors components in Red Hat OpenShift AI-related packages, including updated builds of the affected detector images and packages. Upgrade to a version in which XSD processing is restricted to prevent external resource fetching and local file access.
No public exploits tracked yet. Mallory keeps watching.
11 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.