Evidence · DiggingBeagle record
KServe model storage-initializer SSRF advisory, CVE-2026-13451
Disclosure of cluster-network HTTP requests from a user-controlled InferenceService storageUri.
- Source role
- primary disclosure
Evidence record
Disclosure of cluster-network HTTP requests from a user-controlled InferenceService storageUri.
Claim-level citations (2)
- supportsKServe storageUri fetched model artifacts from cluster-network destinations: The KServe advisory identifies user-controlled storageUri input being fetched by a model-initialization container from the cluster network, creating an internal-request risk under namespace-scoped access.
GHSA-92xh-3g2w-c2j3: InferenceService storageUri and initializer network request path
- supportsKServe storageUri fetched model artifacts from cluster-network destinations: KServe storage initialization accepted a user-supplied InferenceService storageUri as an outbound fetch location without adequately restricting internal network destinations. The caller must have rights to create the relevant Kubernetes InferenceService; exploitation operates under the storage-initializer pod network context. A selected internal address could receive a fetch from a more privileged cluster network zone, exposing reachable services to request-side effects.
GHSA-92xh-3g2w-c2j3: InferenceService storageUri and initializer network request path