CVE-2026-27023 | twentyhq twenty up to 1.17 SecureHttpClientService server-side request forgery

A vulnerability identified as critical has been detected in twentyhq twenty up to 1.17. Affected by this vulnerability is an unknown functionality of the component SecureHttpClientService. Performing a manipulation results in server-side request forgery.

This vulnerability is cataloged as CVE-2026-27023. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.