GHSA-8mc9-fhgx-fwcjProxy allowlist bypass
A crafted URL containing an allowed host can reach another destination through /proxy/ and return the upstream response.
GeoNode proxy bypass exposes internal services and a vector upload can run server commands
GeoNode disclosed seven vulnerabilities, including a proxy allowlist bypass that can return internal HTTP responses and a command injection flaw in vector uploads. The proxy advisory includes a public proof of concept.
- Disclosed
- Nov 5, 2026
- Public disclosure date
- Severity
- CVSS 8.8 × 1
- 7 CVEs tracked here
- Splash zone
- GeoNode deployments exposing the affected proxy, or allowing users to upload vectors, documents or other assets.
- GeoNode · SSRF · RCE · GIS
- In the wild
- Unknown
- Public proxy and asset-read proofs of concept. No confirmed attacks in the advisories.
What happened
GeoNode publishes maps, datasets and documents. Its proxy checks requests against an allowlist before forwarding them. The published example embeds a permitted hostname in a crafted URL. The proxy then connects to another destination and returns its HTTP response. The attacker needs access to the proxy and a hostname the deployment allows. A separate thumbnail-fetch issue lets an authenticated user with remote-document upload access send requests to internal destinations.
A user allowed to upload vector data can supply a layer name that changes what the import worker executes. The CNA record lists 5.1.0, and the tagged 5.0.3 importer also passes an argument list to the conversion process with shell execution disabled. The repository advisory still lists no patched release for that issue.
The batch also covers cross-user access to local asset files, two browser scripting flaws and upload validation bypass. The repository advisory for stored document XSS names 5.0.1, while the CNA record and metadata sanitization backport support 5.0.3 as the upgrade target. The GeoStory advisory lists 4.4.5 and 5.0.2 for the client flaw alone. Sites using an older line or independently packaged client should verify the GeoStory fix in the deployed client and plan a GeoNode upgrade for the server fixes.
The vendor advisories for the CVE entries are GHSA-9fpx-fr6j-2vh6, GHSA-q88x-rvm8-wxp4, GHSA-r4hm-p9f9-fj9v and GHSA-fqpv-mq26-pr4j.
What’s in the bowl
CVE-2026-33050CVSS 8.8Vector upload command injection
A low-privilege user who can upload vectors can put shell syntax in a layer name and run commands as the server's import process.
CVE-2026-65830CVSS 6.5Cross-user asset file read
An authenticated asset owner can use path traversal on the asset download link to read other users' local asset files.
GHSA-hw9r-6m78-w6h3CVSS 5.3Document thumbnail SSRF
An authenticated user who can add a remote document can induce requests to loopback or other internal services.
CVE-2026-55649CVSS 6.3Stored document metadata XSS
Script in a document abstract can execute when a user views the affected content.
GHSA-7vj5-f7gq-96m5CVSS 8.7GeoStory DOM XSS
A low-privilege attacker can plant browser script in the affected MapStore2-based client. A victim must interact with the crafted content.
CVE-2026-46429CVSS 5.5Unrestricted file upload
A crafted upload can bypass validation and let GeoNode store and serve a malicious file.
Fixed versions
| Product | Safe from | Note |
|---|---|---|
| GeoNode 5.0.x | 5.0.3 | Patched for this batch |
| GeoNode 5.1.x | 5.1.0 | Patched for this batch |
Crime-scene timeline
Aug 18, 2026
GeoNode ships 5.0.3 and 5.1.0
Nov 5, 2026
Maintainers publish seven advisories
Nov 6, 2026
CVE records publish for vector injection, file uploads and metadata XSS
Who said what
We list each claim and who made it. Primary sources (the vendor, the researcher, the registry) are marked. Where reports disagree, we grade by the worst credible case.
- GeoNode advisory indexPrimaryLinks all seven disclosures, their prerequisites and the maintainers' affected-version statements.
- GeoNode proxy advisoryPrimaryDocuments the allowlist bypass, its public reproduction and the 5.0.3 fix.
- GeoNode vector importer patchPrimaryStops passing a user-influenced command string to a shell.
- GeoNode 5.0.3 releasePrimaryPublishes the patched 5.0.x release.
- GeoNode 5.1.0 releasePrimaryPublishes the patched 5.1 release.