A vulnerability classified as critical was found in Spinnaker. This vulnerability affects unknown code of the component URL Validation Handler. The manipulation results in server-side request forgery.

This vulnerability was named CVE-2026-25534. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.