PT-2026-28176 · Streamlit+1 · Streamlit+1
Sfc-Gh-Pkamdar
·
Publicado
2026-03-25
·
Atualizado
2026-03-27
·
CVE-2026-33682
CVSS v3.1
4.8
Média
| Vetor | AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Streamlit versions prior to 1.54.0
Description
Streamlit Open Source versions running on Windows hosts are affected by an unauthenticated Server-Side Request Forgery (SSRF) issue. This arises from insufficient validation of filesystem paths provided by an attacker. Specifically, within the
ComponentRequestHandler, paths are resolved using os.path.realpath() or Path.resolve() without adequate validation. Supplying a malicious UNC path (e.g., attacker-controlled-hostshare) can cause the Streamlit server to initiate outbound SMB connections over port 445. During this process, NTLMv2 challenge-response credentials of the Windows user running the Streamlit process may be transmitted, potentially allowing an attacker to perform NTLM relay attacks against internal services or identify reachable SMB hosts through timing analysis. Server-Side Request Forgery (SSRF) is a web security flaw that allows an attacker to cause the server to make HTTP requests to an arbitrary domain of the attacker's choosing. NTLMv2 is a network authentication protocol used by Windows.Recommendations
Upgrade to Streamlit Open Source version 1.54.0 or later.
Exploit
Correção
SSRF
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Streamlit
Windows