ZDI-26-755
ZDI-26-755: (0Day) Genesis World glTF Server-Side Request Forgery Vulnerability
Published Oct 13, 2026
This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Genesis World. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 6.1.
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2026 · Catalog
Detected
This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Genesis World. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 6.1.
Sources
- Zero Day InitiativeZDI-26-755
This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Genesis World. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 6.1.
zerodayinitiative.com