DEV Community

CVE Reports
CVE Reports

Posted on Originally published at cvereports.com

GHSA-M3WP-48JR-VR4G: GHSA-m3wp-48jr-vr4g: Unbounded Remote Media Fetch and Video Frame Expansion DoS in mistral.rs

#security #cve #cybersecurity #ghsa

GHSA-m3wp-48jr-vr4g: Unbounded Remote Media Fetch and Video Frame Expansion DoS in mistral.rs

Vulnerability ID: GHSA-M3WP-48JR-VR4G
CVSS Score: 7.5
Published: 2026-09-10

An unbounded resource consumption and server-side request forgery (SSRF) vulnerability in mistral.rs allows remote, unauthenticated attackers to cause a denial of service (DoS) or execute SSRF attacks. The flaw exists in mistralrs-server-core due to unchecked remote media fetching, infinite stream buffering, and unbounded FFmpeg frame extraction.

TL;DR

Unauthenticated remote attackers can crash the mistral.rs server via Out-Of-Memory (OOM) or exhaust storage/CPU resources by sending crafted media URLs to the completions API.

⚠️ Exploit Status: POC

Technical Details

  • CWE ID: CWE-400, CWE-918
  • Attack Vector: Network (AV:N)
  • CVSS Severity: 7.5 (High)
  • Exploit Status: Proof-of-Concept Publicly Available
  • KEV Status: Not Listed
  • Impact: Denial of Service (OOM/Disk Exhaustion), SSRF

Affected Systems

  • mistral.rs
  • mistralrs-server-core
  • mistralrs-server-core: < 0.8.18 (Fixed in: v0.8.18)

Mitigation Strategies

  • Upgrade mistral.rs to v0.8.18 or later.
  • Apply egress firewall filters to drop connections to internal and loopback IP spaces.
  • Implement Nginx reverse-proxy request payload limits and timeouts.
  • Remove system ffmpeg binaries if video parsing is not required in production.

Remediation Steps:

  1. Check current mistral.rs server version utilizing 'cargo tree' or dependency manifest audits.
  2. Modify Cargo.toml dependency targets for mistralrs-server-core to version >= 0.8.18.
  3. Rebuild application using updated crates.io packages and verify media_source.rs features are active.
  4. Add egress rules in iptables to restrict host server from querying local network assets.

References

Read the full report for GHSA-M3WP-48JR-VR4G on our website for more details including interactive diagrams and full exploit analysis.

Top comments (0)