CVE-2026-33953 — LinkAce's SSRF protection can be bypassed via internal hostname resolution in LinkAce

CVE-2026-33953

LinkAce's SSRF protection can be bypassed via internal hostname resolution in LinkAce PUBLISHED

Description (CNA)

LinkAce is a self-hosted archive to collect website links. Versions prior to 2.5.3 block direct requests to private IP literals, but still performs server-side requests to internal-only resources when those resources are referenced through an internal hostname. This allows an authenticated user to trigger server-side requests to internal services reachable by the LinkAce server but not directly reachable by an external user. Version 2.5.3 patches the issue.

Affected (CNA)

Vendor / product	Versions
Kovah / LinkAce	affected < 2.5.3

CWE

CWE-918

References

https://github.com/Kovah/LinkAce/security/advisories/GHSA-wp4g-qw9j-wfjg

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.