A vulnerability classified as critical has been found in Directus up to 11.15.x. Affected by this issue is some unknown functionality. The manipulation leads to server-side request forgery.
This vulnerability is uniquely identified as CVE-2026-35409. The attack is possible to be carried out remotely. No exploit exists.
It is recommended to upgrade the affected component.
