Is CVE-2026-111385 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-111385?

CVE-2026-111385 has a CVSS v3 severity of MEDIUM (4.8).

Back

CVE-2026-111385

Description

Nezha from 2.1.0 before 2.3.15 contains a host header injection vulnerability in mintTransferTool that builds fs.download_url and fs.upload_url transfer URLs from the unvalidated Host header. Attackers who control the Host header seen on a victim's MCP request can redirect file uploads or capture one-time download tokens and replay them to exfiltrate files.