TechPrufer
Get started
Meilisearch
Meilisearch logoMeilisearch · Feature trail

SSRF Vulnerability Fix

1 post · Jan 2026

What this trail covers

Meilisearch has addressed an authenticated, blind Server-Side Request Forgery (SSRF) vulnerability in versions v1.8 to v1.34.0. The fix, implemented in v1.34.1, prevents Meilisearch instances from making requests to non-global IP addresses. For specific use cases requiring such functionality, an experimental parameter `--experimental-allow-ip-networks` is available, with a strong recommendation to review security implications and apply defense-in-depth principles. Meilisearch Cloud customers are protected.

All Meilisearch trails
  1. Meilisearch security update: SSRF vulnerability fixed in v1.34.1Meilisearch v1.34.1 fixes an SSRF vulnerability by forbidding requests to non-global IP addresses. An experimental parameter `--experimental-allow-ip-networks` is available for specific use cases, with a recommendation for security review and defense-in-depth principles.