CVE-2026-44313
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
Linkwarden prior to version 2.13.0 contains a Server-Side Request Forgery (SSRF) vulnerability in the fetchTitleAndHeaders function. Authenticated users can make arbitrary HTTP requests to internal services due to insufficient URL validation.
Risk Assessment
An attacker can scan the internal network, access sensitive data, or launch attacks against other internal systems.
Recommendation
Immediately update to version 2.13.0 or later.
Other vulnerabilities in Linkwarden
See all- CVE-2026-42455High
Linkwarden versions 2.14.0 and earlier do not sanitize HTML files uploaded as archives. The endpoint /api/v1/archives/[linkId]?format=4 accepts HTML files with JavaScript, which is then served from the same origin without a Content-Security-Policy header. This allows arbitrary JavaScript execution in the context of an authenticated user session.
- CVE-2025-49588High
Linkwarden, a self-hosted bookmark manager, in version 2.10.2 accepts links of format file:///etc/passwd and does not perform any validation before sending them to parsers and playwright. This can result in leakage of other users' links and, in some cases, leakage of environment secrets. The issue is fixed in version 2.10.3.
Original NVD description (English source)
Linkwarden is a self-hosted, open-source collaborative bookmark manager to collect, organize and archive webpages. Prior to version 2.13.0, a Server-Side Request Forgery (SSRF) vulnerability in the fetchTitleAndHeaders function allows authenticated users to make arbitrary HTTP requests to internal services due to insufficient URL validation that only checks for "http://" or "https://" prefixes. This issue has been patched in version 2.13.0.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS