Bytedesk vulnerabilities
We track 4 vulnerabilities in Bytedesk products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on March 9, 2026.
Latest Bytedesk vulnerabilities
- 8.8 High severity
Bytedesk: Server-Side Request Forgery
A vulnerability was detected in Bytedesk up to 1.3.9. Affected is the function getModels of the file source-code/src/main/java/com/bytedesk/ai/springai/providers/gitee/SpringAIGiteeRestService.java of the component SpringAIGiteeRestController. Performing a man
- 8.8 High severity
Bytedesk: Server-Side Request Forgery
A security vulnerability has been detected in Bytedesk up to 1.3.9. This impacts the function getModels of the file source-code/src/main/java/com/bytedesk/ai/springai/providers/openrouter/SpringAIOpenrouterRestService.java of the component SpringAIOpenrouterRe
- 8.8 High severity
Bytedesk: Unrestricted Upload of File with Dangerous Type
A weakness has been identified in Bytedesk up to 1.3.9. This vulnerability affects the function handleFileUpload of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestService.java of the component SVG File Handler. Executing a manipulation c
- 8.8 High severity
Bytedesk: Unrestricted Upload of File with Dangerous Type
A security flaw has been discovered in Bytedesk up to 1.3.9. This affects the function uploadFile of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestController.java of the component SVG File Handler. Performing a manipulation results in u