PyPI: streamlit
CVE-2026-33682
Safety vulnerability ID: SFTY-20260325-49743
Safety legacy ID: pyup.io-90572
Affected versions of the Streamlit package are vulnerable to Server-Side Request Forgery (SSRF) due to improper validation of attacker-supplied filesystem paths on Windows hosts. In vulnerable code paths, including ComponentRequestHandler, Streamlit resolves user-controlled paths with os.path.realpath() or Path.resolve() before sufficient validation, allowing a malicious UNC path such as \\attacker-controlled-host\share to trigger an outbound SMB connection from the server.
Overview
Unauthenticated SSRF Vulnerability in Streamlit on Windows (NTLM Credential Exposure)
Advisory
Affected versions of the Streamlit package are vulnerable to Server-Side Request Forgery (SSRF) due to improper validation of attacker-supplied filesystem paths on Windows hosts. In vulnerable code paths, including ComponentRequestHandler, Streamlit resolves user-controlled paths with os.path.realpath() or Path.resolve() before sufficient validation, allowing a malicious UNC path such as \\attacker-controlled-host\share to trigger an outbound SMB connection from the server.
How to Fix
Mitigation and Workarounds
---
Vulnerable Functions
Functions linked to known vulnerabilities.
References
- https://getsafety.com/vulnerabilities/SFTY-20260325-49743/CVE-2026-33682
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33682
- https://data.safetycli.com/changelogs/streamlit/
- https://github.com/advisories/GHSA-7p48-42j8-8846
- https://github.com/streamlit/streamlit/commit/23692ca70b2f2ac720c72d1feb4f190c9d6eed76
- https://pypi.org/project/streamlit
- https://github.com/streamlit/streamlit/security/advisories/GHSA-7p48-42j8-8846
- https://github.com/streamlit/streamlit/commit/23692ca70b2f2ac720c72d1feb4f190c9d6eed76
- https://github.com/streamlit/streamlit/releases/tag/1.54.0
- https://nvd.nist.gov/vuln/detail/CVE-2026-33682
- https://github.com/advisories/GHSA-7p48-42j8-8846
Verified by Safety
Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.
Learn more