Frappe Builder and CRM: Four Vulnerabilities Disclosed, Including High-Severity SSRF
Key findings • High-severity SSRF in Frappe Builder (CVE-2026-115717) impacting convert_to_webp API. • Medium-severity SSRF in Frappe Builder (CVE-2026-115720) due to insufficient hostname va…
Key findings
- High-severity SSRF in Frappe Builder (CVE-2026-115717) impacting convert_to_webp API.
- Medium-severity SSRF in Frappe Builder (CVE-2026-115720) due to insufficient hostname validation after redirects.
- Missing authorization in Frappe CRM (CVE-2026-116492) allows low-privileged users to read sensitive lead data.
- Authenticated users can leverage site owner's API keys via an authorization flaw in Frappe Builder's improve_prompt endpoint (CVE-2026-115718).
- All vulnerabilities were patched in Frappe Builder 1.36.1 and Frappe CRM 1.89.1.
On October 26, 2026, a batch of four vulnerabilities was disclosed for Frappe, a web framework commonly used for building business applications. The vulnerabilities, disclosed within a two-hour window, affect various Frappe applications, including the CRM and Builder components. The most severe, CVE-2026-115717, is a high-severity Server-Side Request Forgery (SSRF) in Frappe Builder. This cluster of vulnerabilities highlights potential security gaps in how Frappe handles user authorization and external resource requests.
Two of the disclosed vulnerabilities are related to Server-Side Request Forgery (SSRF). CVE-2026-115717, rated High, exists in Frappe Builder versions prior to 1.36.1 within the convert_to_webp API. This endpoint fails to enforce proper access controls, allowing unprotected requests.get calls that can follow redirects without re-validating IP addresses. Similarly, CVE-2026-115720, a Medium severity SSRF in Frappe Builder before 1.36.1, occurs in builder/api.py. While a guard exists to validate hostnames, it's insufficient as it doesn't re-validate after redirects, enabling attackers to exploit the default redirect-following behavior of requests.get.
Another vulnerability, CVE-2026-116492, a Medium severity flaw in the Frappe CRM app (versions before 1.89.1), stems from a missing authorization check. This allows authenticated, low-privileged users to access CRM Lead records they shouldn't by querying the get_contact_by_phone_number API, which bypasses the standard permission system through raw database queries.
Furthermore, CVE-2026-115718, a Medium severity vulnerability in Frappe Builder versions 1.33.0 to 1.36.0, involves a missing authorization flaw in the improve_prompt endpoint. This permits any authenticated non-Guest user to trigger LLM completions without adequate permission checks. Attackers can exploit this by calling the improve_prompt API to utilize the site owner's stored OpenRouter API credentials.
The disclosed vulnerabilities were addressed in Frappe Builder version 1.36.1 and Frappe CRM app version 1.89.1. Users are strongly advised to update to these patched versions to mitigate the risks associated with SSRF and authorization bypass flaws. The coordinated disclosure of these issues on October 26, 2026, underscores the importance of timely patching for Frappe-based applications to prevent potential data exposure and unauthorized access.
This batch of vulnerabilities, particularly the SSRF flaws in Frappe Builder, presents a significant risk for organizations using the framework. The ability for authenticated users to escalate privileges or for external requests to be manipulated could lead to serious security breaches. Promptly applying the available patches is crucial for maintaining the integrity and security of Frappe applications.
Key findings from this disclosure include:
- High-severity SSRF in Frappe Builder (CVE-2026-115717) impacting convert_to_webp API.
- Medium-severity SSRF in Frappe Builder (CVE-2026-115720) due to insufficient hostname validation after redirects.
- Missing authorization in Frappe CRM (CVE-2026-116492) allows low-privileged users to read sensitive lead data.
- Authenticated users can leverage site owner's API keys via an authorization flaw in Frappe Builder's improve_prompt endpoint (CVE-2026-115718).
- All vulnerabilities were patched in Frappe Builder 1.36.1 and Frappe CRM 1.89.1.
CVE-2026-116492, CVE-2026-115720, CVE-2026-115718, CVE-2026-115717