CVE-2026-71210 — mealie - DNS-Rebinding TOCTOU in SSRF Guard Allows Internal Network and Cloud Metadata Access

CVE-2026-71210

mealie - DNS-Rebinding TOCTOU in SSRF Guard Allows Internal Network and Cloud Metadata Access PUBLISHED

Description (CNA)

Mealie's AsyncSafeTransport SSRF guard (mealie/pkgs/safehttp/transport.py) resolves a target hostname once, checks the resolved IP against private-range rules, but then issues the actual outbound HTTP request using the original hostname, which the underlying async transport re-resolves independently.

Affected (CNA)

Vendor / product	Versions
mealie-recipes / mealie	affected 0

CWE

CWE-367

References

https://github.com/mealie-recipes/mealie

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.