{"schema":"threatline.record/2","record":{"id":"CVE-2026-108741","aliases":[],"summary":"Shepherd through 0.3.1 SSRF via DNS Rebinding in Citation Checker","details":"Shepherd (shepherd-ai) through 0.3.1 contains a server-side request forgery guard bypass in the citation-checker extra because the public_url guard validates a resolved address but fetch re-resolves the hostname at connect time. Attackers who plant a crafted reference URL in a checked document and control its DNS can rebind it to internal addresses, sending GET requests to internal HTTP(S) services and capturing responses in evidence files.","categories":["Unclassified"],"product":"Shepherd","vendor":"shepherd-agents","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-108741","source_modified_at":"2026-10-13T17:00:35.001Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"Shepherd","vendor":"shepherd-agents","versions":[{"version":"0","lessThanOrEqual":"0.3.1","status":"affected","versionType":"semver"}],"defaultStatus":"unaffected"}],"fixed_versions":[],"cvss":2.3,"severity":"Low","kev":{"listed":false},"epss":{"probability":0.00182,"percentile":0.07367,"score_date":"2026-10-23"},"published_at":"2026-10-11T12:19:45.494Z","modified_at":"2026-10-13T17:00:35.001Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-108741","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-10-13T17:00:35.001Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-108741","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://hackmd.io/@haind03/shepherd-citation-checker-dns-rebinding-ssrf","tags":["third-party-advisory"]},{"source":"CVE List","url":"https://github.com/shepherd-agents/shepherd/blob/d34d5ca334871dfcb5a3dc76dd78045829fa4e56/shepherd/extras/citation-checker/src/shepherd_citation_checker/_engine/network.py#L9-L17","tags":["technical-description"]},{"source":"CVE List","url":"https://github.com/shepherd-agents/shepherd/blob/d34d5ca334871dfcb5a3dc76dd78045829fa4e56/shepherd/extras/citation-checker/src/shepherd_citation_checker/_engine/fetch.py#L34-L55","tags":["technical-description"]},{"source":"CVE List","url":"https://github.com/shepherd-agents/shepherd","tags":["product"]},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/shepherd-through-0.3.1-ssrf-via-dns-rebinding-in-citation-checker","tags":["third-party-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","assessed_at":"2026-10-13T15:49:34.302287Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-13T17:00:35.001Z","content_hash":"ab667d44d2f25fbf1a526f31f53569ccf6bcf2c2d4d259a50a66186bb4b8e251"}}