Meilisearch security update: SSRF vulnerability fixed in v1.34.1
Jan 27, 2026Louis Dureuil

Summary
Meilisearch v1.34.1 fixes an SSRF vulnerability by forbidding requests to non-global IP addresses. An experimental parameter `--experimental-allow-ip-networks` is available for specific use cases, with a recommendation for security review and defense-in-depth principles.