Intel

CVE-2026-15143

Ein Fehler wurde im Dateityp-Inhaltserkennungsmodul von guardrails-detectors gefunden.

criticalEPSS 0.4%

Description

A flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition (XSD) string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file reads, potentially resulting in sensitive information disclosure, such as cloud provider credentials or access to internal network services.

Source: NVD (NIST)cvelistv5

Metrics

XIEM Effective CVSS
9.3
Source: nvd-v3
EPSS percentile
35.5 %
Elevated — this CVE ranks above at least 10% of all CVEs scored today.
KEV status
—
Show all metrics
Severity
critical
Priority score
78.45
Exploit maturity
no public PoC known
CVSS v3
9.3
EPSS score
0.4 %
Low — model estimates < 1% exploitation likelihood.
Published
2026-07-10 15:25 UTC
CWE
CWE-918

Weakness classes (CWE)

  • CWE-918Base

    Server-Side Request Forgery (SSRF)

    The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

    cwe.mitre.org →

References & sources

Linked advisories