A vulnerability, which was classified as critical, was found in InvenTree 1.2.6. Affected is an unknown function. Such manipulation of the argument remote_image leads to server-side request forgery.
This vulnerability is documented as CVE-2026-39362. The attack can be executed remotely. There is not any exploit available.
You should upgrade the affected component.
