CVE-2026-45709 | axllent mailpit 1.28.1/1.28.2/1.28.3/1.29.2 on GHSA private/loopback/IMDS server-side request forgery

A vulnerability was found in axllent mailpit 1.28.1/1.28.2/1.28.3/1.29.2 on GHSA. It has been rated as critical. The impacted element is an unknown function of the file private/loopback/IMDS. Performing a manipulation results in server-side request forgery.

This vulnerability was named CVE-2026-45709. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.