CVE-2022-29180

    Dashboard / Vulnerabilities / CVE-2022-29180

    CVE-2022-29180

    Published: 7 May 2022Last Modified: 12 Aug 2026

    Summary: Charm vulnerable to server-side request forgery (SSRF)

    Details: A vulnerability in which attackers could forge HTTP requests to manipulate the `charm` data directory to access or delete anything on the server. This has been patched and is available in release [v0.12.1](https://github.com/charmbracelet/charm/releases/tag/v0.12.1). We recommend that all users running self-hosted `charm` instances update immediately. This vulnerability was found in-house and we haven't been notified of any potential exploiters. ### Additional notes * Encrypted user data uploaded to the Charm server is safe as Charm servers cannot decrypt user data. This includes filenames, paths, and all key-value data. * Users running the official Charm [Docker images](https://github.com/charmbracelet/charm/blob/main/docker.md) are at minimal risk because the exploit is limited to the containerized filesystem.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29180.json, https://github.com/charmbracelet/charm/security/advisories/GHSA-4wpp-w5r4-7v5v, https://nvd.nist.gov/vuln/detail/CVE-2022-29180, https://github.com/charmbracelet/charm/commit/3c90668f955c7ce5ef721e4fc9faee7053232fd3

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- e5541276ab997466569ddf3fc12dffe8034a0920
    Fixed -24b4bbdd7ee0a98f2b68973999f47f79799bd368

    Affected versions

    v0.12.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-29180 | CVE-DB