CloudTAK: Authenticated full-read SSRF in the /api/esri* routes — user-controlled URL fetched with no IP-classification - CVE-2026-55177

Description

No description available.

Recommendation

Update the @tak-ps/cloudtak package to the latest compatible version. Followings are version details:

Affected version(s): < 13.10.0
Patched version(s): 13.10.0

References

GHSA-r95q-fp26-h3hc
CVE-2026-55177
CWE-918
CAPEC-310
OWASP 2021-A10
OWASP 2021-A6

Could your website be exposed too?

SmartScanner can check your website for CloudTAK: Authenticated full-read SSRF in the /api/esri* routes — user-controlled URL fetched with no IP-classification and gives you actionable findings to investigate.

Start a free scan

Related Issues

TAK-PS-Stats Web UI: Authenticated full-read SSRF in CloudTAK basemap import (PUT /api/basemap) — no IP-classification g - CVE-2026-54546
SillyTavern: Path Traversal in `/api/chats/export` and `/api/chats/delete` allows arbitrary file read/delete within user - CVE-2026-34524
PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments - CVE-2026-45623
SillyTavern: Incomplete IP validation in /api/search/visit allows SSRF via localhost and IPv6 - CVE-2026-34526

CSRF, XXE, and 12 Other Security Acronyms Explained

10 Secure Coding Best Practices to Follow in Every Project

Update Cheat Sheet for Developers

See something that needs correcting? Let us knowUpdated July 17, 2026