What happened
NVD published CVE-2026-18647 (CVSS 7.3) on 2026-08-03, based on a public vulnerability report describing a server-side request forgery in Jina AI Reader's crawler component due to a flawed TLD validation function.
Why it matters
Jina AI Reader converts web pages into LLM-ready Markdown for RAG and agent pipelines; an SSRF in its crawling component could let an attacker pivot the tool into probing or reaching internal network resources (including cloud metadata endpoints) when the reader processes attacker-supplied or attacker-influenced URLs.
Attack vector
The isValidTLD function in the Crawler/Puppeteer component (backend/functions/src/cloud-functions/crawler.ts) improperly validates target hostnames/TLDs, allowing an attacker to supply a URL that bypasses the intended domain restriction and causes the crawler to make server-side requests to unintended (internal) targets.
Affected systems
jina-ai/reader up to commit 1574bfd380d249c86c82db4dace0d9c8fe17e2b1
Mitigation
Apply the upstream fix once released; restrict egress from the crawler's execution environment and validate destination IPs/hosts independently of TLD string checks.