A vulnerability classified as critical was found in Spinnaker. This vulnerability affects unknown code of the component URL Validation Handler. The manipulation results in server-side request forgery.
This vulnerability was named CVE-2026-25534. The attack may be performed from remote. There is no available exploit.
Upgrading the affected component is advised.