ETK-2026-3613Zero's internal tracking ID, independent of the CVE number.

{
  "etk_id": "ETK-2026-3613",
  "cve_id": null,
  "display_id": "ETK-2026-3613",
  "ghsa_id": "GHSA-mx6c-8c42-fw44",
  "euvd_id": null,
  "status": "published",
  "anchor_state": "awaiting_cve",
  "title": "DNS rebinding SSRF in harnessrouter",
  "summary": "HarnessRouter Docker images before 0.32.1 can be induced to make outbound HTTP or Git connections to internal addresses after hostname validation. An authenticated tenant member who controls the hostname's DNS responses may probe internal services or cause requests to reach metadata endpoints on hosted deployments.",
  "mitigation": "Update the harnessrouter Docker image to version 0.32.1 or later. Until updated, restrict access to the affected URL and Git-import features and enforce outbound network controls that block private, loopback, link-local, and metadata destinations.",
  "vendor": "other",
  "product": "other:harnessrouter/harnessrouter (Docker image)",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "< 0.32.1"
      ],
      "ecosystem": "other",
      "fixed_versions": [
        "0.32.1"
      ],
      "package_name": "harnessrouter/harnessrouter (Docker image)",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 7.7,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 25.394844366666668,
  "t0_at": null,
  "signals": {
    "trigger_signal": {
      "at": "2026-11-04T00:52:11+00:00",
      "days": -1.6545201515740742,
      "is_lower_bound": true,
      "measured_at": "2026-11-05T16:34:41.644807+00:00",
      "url": "https://github.com/HarnessRouter/harnessrouter/security/advisories/GHSA-mx6c-8c42-fw44"
    }
  }
}