High severity · published May 17, 2026
CVE-2026-8768
vercel ai provider-utils download-blob.ts validateDownloadUrl server-side request forgery
7.3
CVSS
0.5%
EPSS
No
On KEV
Description
A vulnerability was found in vercel ai up to 3.0.97. The affected element is the function validateDownloadUrl of the file packages/provider-utils/src/download-blob.ts of the component provider-utils. The manipulation results in server-side request forgery. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AI
ai · vercel
3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5; +34 more · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-8768
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-8768
Not Applicable
https://gist.github.com/YLChen-007/07d149bd68adbee58165b4207a2abc71
Exploit
https://gist.github.com/YLChen-007/cf7e47e4dda392f474ca77a66d1d847f
Third Party Advisory
https://vuldb.com/submit/811404
Third Party Advisory
https://vuldb.com/submit/811405
Third Party Advisory
https://vuldb.com/vuln/364393
Permissions Required
https://vuldb.com/vuln/364393/cti
More from ai
7.5
CVE-2026-8767
vercel ai PR Branch Name Interpolation prettier-on-automerge.yml run os command injection
6.5
CVE-2026-8769
vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption
5.3
CVE-2025-48985
A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta