CRITICALCVSS 9.3Vulnerability

CVE-2026-15143

A flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition (XSD) string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file reads, potentially resulting in sensitive information disclosure, such as cloud provider credentials or access to internal network services.

Properties

Severity
CRITICAL
Cvss severity
CRITICAL
Cvss score
9.3
Epss score
0.00536
Retrieved at
2026-10-25T14:50:32+00:00
Last source
FIRST EPSS
Score
9.3
Cve id
CVE-2026-15143
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
In Signal since
initial import (Sep 2026)
Name
CVE-2026-15143
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
Published at
2026-07-10T16:16:25.680
Last modified
2026-08-31T14:17:13.210
Epss percentile
0.44912

Related Entities (1)

HAS_WEAKNESS (1)

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-15143 (CVSS 9.3) — Ninja Signal Threat Intelligence | Ninja Signal