Common Weakness Enumeration
CWE-942
AllowedPermissive Cross-domain Security Policy with Untrusted Domains
Abstraction: Variant · Status: Incomplete
The product uses a web-client protection mechanism such as a Content Security Policy (CSP) or cross-domain policy file, but the policy includes untrusted domains with which the web client is allowed to communicate.
129 vulnerabilities reference this CWE, most recent first.
CVE-2026-119285 (GCVE-0-2026-119285)
Vulnerability from cvelistv5 – Published: 2026-10-29 21:36 – Updated: 2026-11-04 01:55
VLAI
EPSS
VEX
Title
Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads
Summary
Fiber is an Express inspired web framework written in Go. From 2.52.1 until 2.52.3, the CORS middleware's validateDomain wildcard matcher in middleware/cors/utils.go strips the scheme and checks only a host suffix without requiring a dot boundary. An application configured with a wildcard-subdomain AllowOrigins value and AllowCredentials enabled can reflect an unrelated attacker-controlled origin whose host merely ends with the configured base domain. A user who visits that origin can expose authenticated cross-origin responses to the attacker's page; empty-label origins and later comma-space parsing hardening are outside this advisory. This issue is fixed in version 2.52.3.
Severity
5.9 (Medium)
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 01:54 UTC
CWE
Assigner
GitHub_M
CNA
References
4 references
| URL | Tags |
|---|---|
| https://github.com/gofiber/fiber/security/advisor… | x_refsource_CONFIRM |
| https://github.com/gofiber/fiber/pull/2915 | x_refsource_MISC |
| https://github.com/gofiber/fiber/commit/1aac6f618… | x_refsource_MISC |
| https://github.com/gofiber/fiber/releases/tag/v2.52.3 | x_refsource_MISC |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-119285",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T01:54:49.126662Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T01:55:09.920Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/gofiber/fiber/security/advisories/GHSA-g5jq-qmqr-qrwf"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "fiber",
"vendor": "gofiber",
"versions": [
{
"status": "affected",
"version": "\u003e= 2.52.1, \u003c 2.52.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Fiber is an Express inspired web framework written in Go. From 2.52.1 until 2.52.3, the CORS middleware\u0027s validateDomain wildcard matcher in middleware/cors/utils.go strips the scheme and checks only a host suffix without requiring a dot boundary. An application configured with a wildcard-subdomain AllowOrigins value and AllowCredentials enabled can reflect an unrelated attacker-controlled origin whose host merely ends with the configured base domain. A user who visits that origin can expose authenticated cross-origin responses to the attacker\u0027s page; empty-label origins and later comma-space parsing hardening are outside this advisory. This issue is fixed in version 2.52.3."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-346",
"description": "CWE-346: Origin Validation Error",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-942",
"description": "CWE-942: Permissive Cross-domain Policy with Untrusted Domains",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-29T21:36:02.199Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/gofiber/fiber/security/advisories/GHSA-g5jq-qmqr-qrwf",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/gofiber/fiber/security/advisories/GHSA-g5jq-qmqr-qrwf"
},
{
"name": "https://github.com/gofiber/fiber/pull/2915",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/gofiber/fiber/pull/2915"
},
{
"name": "https://github.com/gofiber/fiber/commit/1aac6f618b6bd3e159d2449acb4232a2170b976b",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/gofiber/fiber/commit/1aac6f618b6bd3e159d2449acb4232a2170b976b"
},
{
"name": "https://github.com/gofiber/fiber/releases/tag/v2.52.3",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/gofiber/fiber/releases/tag/v2.52.3"
}
],
"source": {
"advisory": "GHSA-g5jq-qmqr-qrwf",
"discovery": "UNKNOWN"
},
"title": "Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-119285",
"datePublished": "2026-10-29T21:36:02.199Z",
"dateReserved": "2026-10-29T18:50:28.065Z",
"dateUpdated": "2026-11-04T01:55:09.920Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-116748 (GCVE-0-2026-116748)
Vulnerability from cvelistv5 – Published: 2026-10-26 21:52 – Updated: 2026-10-31 02:02
VLAI
EPSS
VEX
Title
Transmission 4.0.0 before 4.1.3 Permissive CORS Leaks RPC Anti-CSRF Token
Summary
Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that exposes the X-Transmission-Session-Id anti-CSRF token to any web origin. Malicious web pages can read the token from the 409 handshake response and replay it to issue RPC calls, enabling script-torrent-done execution, download-dir changes, or torrent and data deletion.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-31 02:02 UTC
CWE
- CWE-942 - Permissive Cross-domain Security Policy with Untrusted Domains
Assigner
VulnCheck
CNA
References
7 references
| URL | Tags |
|---|---|
| https://github.com/transmission/transmission/pull/8938 | issue-trackingpatch |
| https://github.com/transmission/transmission/comm… | patch |
| https://github.com/transmission/transmission | product |
| https://github.com/transmission/transmission/rele… | release-notes |
| https://github.com/transmission/transmission/blob… | technical-description |
| https://joshua.hu/transmission-cors-rpc-csrf-rce-… | third-party-advisory |
| https://www.vulncheck.com/advisories/transmission… | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| transmission | transmission |
Affected:
4.0.0 , < 4.1.3
(semver)
cpe:2.3:a:transmissionbt:transmission:*:*:*:*:*:*:*:* |
Date Public
2026-06-25 00:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-116748",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-31T02:02:29.585820Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-31T02:02:38.641Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageURL": "pkg:github/transmission/transmission",
"product": "transmission",
"repo": "https://github.com/transmission/transmission",
"vendor": "transmission",
"versions": [
{
"lessThan": "4.1.3",
"status": "affected",
"version": "4.0.0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:transmissionbt:transmission:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.1.3",
"versionStartIncluding": "4.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Joshua Rogers"
},
{
"lang": "en",
"type": "remediation developer",
"value": "ckerr"
}
],
"datePublic": "2026-06-25T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that exposes the X-Transmission-Session-Id anti-CSRF token to any web origin. Malicious web pages can read the token from the 409 handshake response and replay it to issue RPC calls, enabling script-torrent-done execution, download-dir changes, or torrent and data deletion."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"privilegesRequired": "NONE",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "PASSIVE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-942",
"description": "Permissive Cross-domain Security Policy with Untrusted Domains",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T21:52:45.799Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"name": "Pull Request #8938",
"tags": [
"issue-tracking",
"patch"
],
"url": "https://github.com/transmission/transmission/pull/8938"
},
{
"name": "Patch Commit",
"tags": [
"patch"
],
"url": "https://github.com/transmission/transmission/commit/c6a1bd2017a0fea9c956737c213f23e4b0f7929e"
},
{
"tags": [
"product"
],
"url": "https://github.com/transmission/transmission"
},
{
"name": "transmission 4.1.3 Release Notes",
"tags": [
"release-notes"
],
"url": "https://github.com/transmission/transmission/releases/tag/4.1.3"
},
{
"tags": [
"technical-description"
],
"url": "https://github.com/transmission/transmission/blob/4.1.2/libtransmission/rpc-server.cc#L560"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://joshua.hu/transmission-cors-rpc-csrf-rce-drive-by-exploit"
},
{
"name": "VulnCheck Advisory: Transmission 4.0.0 before 4.1.3 Permissive CORS Leaks RPC Anti-CSRF Token",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/transmission-4.0.0-before-4.1.3-permissive-cors-leaks-rpc-anti-csrf-token"
}
],
"title": "Transmission 4.0.0 before 4.1.3 Permissive CORS Leaks RPC Anti-CSRF Token",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-116748",
"datePublished": "2026-10-26T21:52:45.799Z",
"dateReserved": "2026-10-26T20:23:37.457Z",
"dateUpdated": "2026-10-31T02:02:38.641Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-115917 (GCVE-0-2026-115917)
Vulnerability from cvelistv5 – Published: 2026-10-26 17:20 – Updated: 2026-10-31 01:38
VLAI
EPSS
VEX
Title
vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server
Summary
vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the OpenAI-compatible server configures Starlette CORSMiddleware with allowed_origins set to a wildcard by default. A malicious web page can use a victim's browser to reach an unauthenticated vLLM server on localhost, an internal network, or a VPN, call endpoints including GET /v1/models and POST /v1/chat/completions, consume GPU resources, and read responses. Cookie-based cross-site request forgery does not apply because credentials are disabled by default, and deployments requiring bearer authentication are exposed only when the caller already has a usable token. This issue is fixed in version 0.32.0.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-31 01:38 UTC
CWE
- CWE-942 - Permissive Cross-domain Policy with Untrusted Domains
Assigner
GitHub_M
CNA
References
4 references
| URL | Tags |
|---|---|
| https://github.com/vllm-project/vllm/security/adv… | x_refsource_CONFIRM |
| https://github.com/vllm-project/vllm/pull/61009 | x_refsource_MISC |
| https://github.com/vllm-project/vllm/commit/fcae5… | x_refsource_MISC |
| https://github.com/vllm-project/vllm/releases/tag… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| vllm-project | vllm |
Affected:
< 0.32.0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-115917",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-31T01:38:43.564283Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-31T01:38:53.155Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "vllm",
"vendor": "vllm-project",
"versions": [
{
"status": "affected",
"version": "\u003c 0.32.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the OpenAI-compatible server configures Starlette CORSMiddleware with allowed_origins set to a wildcard by default. A malicious web page can use a victim\u0027s browser to reach an unauthenticated vLLM server on localhost, an internal network, or a VPN, call endpoints including GET /v1/models and POST /v1/chat/completions, consume GPU resources, and read responses. Cookie-based cross-site request forgery does not apply because credentials are disabled by default, and deployments requiring bearer authentication are exposed only when the caller already has a usable token. This issue is fixed in version 0.32.0."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.4,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-942",
"description": "CWE-942: Permissive Cross-domain Policy with Untrusted Domains",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T17:20:09.065Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/vllm-project/vllm/security/advisories/GHSA-vvpg-rrww-wpmh",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-vvpg-rrww-wpmh"
},
{
"name": "https://github.com/vllm-project/vllm/pull/61009",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vllm-project/vllm/pull/61009"
},
{
"name": "https://github.com/vllm-project/vllm/commit/fcae5c98870ff2c20659731dce7ba3a3ff0d48aa",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vllm-project/vllm/commit/fcae5c98870ff2c20659731dce7ba3a3ff0d48aa"
},
{
"name": "https://github.com/vllm-project/vllm/releases/tag/v0.32.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vllm-project/vllm/releases/tag/v0.32.0"
}
],
"source": {
"advisory": "GHSA-vvpg-rrww-wpmh",
"discovery": "UNKNOWN"
},
"title": "vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-115917",
"datePublished": "2026-10-26T17:20:09.065Z",
"dateReserved": "2026-10-23T20:21:45.107Z",
"dateUpdated": "2026-10-31T01:38:53.155Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-111922 (GCVE-0-2026-111922)
Vulnerability from cvelistv5 – Published: 2026-10-17 18:46 – Updated: 2026-10-19 15:00
VLAI
EPSS
VEX
Title
Vikunja 2.2.0 before 2.7.0 Permissive CORS Policy Trusting Localhost Origins
Summary
Vikunja from 2.2.0 before 2.7.0 contains a permissive CORS configuration that trusts every localhost and 127.0.0.1 port with credentials, even when service.publicurl is set. Attackers controlling a page on any localhost port can send a credentialed request to the token refresh endpoint and read the returned bearer JWT to take over the logged-in user's account.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-19 15:00 UTC
CWE
- CWE-942 - Permissive Cross-domain Security Policy with Untrusted Domains
Assigner
VulnCheck
CNA
References
2 references
| URL | Tags |
|---|---|
| https://github.com/go-vikunja/vikunja/security/ad… | vendor-advisory |
| https://www.vulncheck.com/advisories/vikunja-2.2.… | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| go-vikunja | vikunja |
Affected:
2.2.0 , < 2.7.0
(semver)
Unaffected: 2.7.0 (semver) cpe:2.3:a:vikunja:vikunja:*:*:*:*:*:*:*:* |
Date Public
2026-10-03 00:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-111922",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-19T15:00:08.819201Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T15:00:44.366Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/go-vikunja/vikunja/security/advisories/GHSA-m687-p538-r5hp"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageURL": "pkg:golang/code.vikunja.io/api",
"product": "vikunja",
"vendor": "go-vikunja",
"versions": [
{
"lessThan": "2.7.0",
"status": "affected",
"version": "2.2.0",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "2.7.0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:vikunja:vikunja:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.7.0",
"versionStartIncluding": "2.2.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "arthurscchan"
},
{
"lang": "en",
"type": "reporter",
"value": "AdamKorcz"
}
],
"datePublic": "2026-10-03T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Vikunja from 2.2.0 before 2.7.0 contains a permissive CORS configuration that trusts every localhost and 127.0.0.1 port with credentials, even when service.publicurl is set. Attackers controlling a page on any localhost port can send a credentialed request to the token refresh endpoint and read the returned bearer JWT to take over the logged-in user\u0027s account."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "LOCAL",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "PASSIVE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-942",
"description": "Permissive Cross-domain Security Policy with Untrusted Domains",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-17T18:46:35.991Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"name": "GitHub Security Advisory (GHSA-m687-p538-r5hp)",
"tags": [
"vendor-advisory"
],
"url": "https://github.com/go-vikunja/vikunja/security/advisories/GHSA-m687-p538-r5hp"
},
{
"name": "VulnCheck Advisory: Vikunja 2.2.0 before 2.7.0 Permissive CORS Policy Trusting Localhost Origins",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/vikunja-2.2.0-before-2.7.0-permissive-cors-policy-trusting-localhost-origins"
}
],
"title": "Vikunja 2.2.0 before 2.7.0 Permissive CORS Policy Trusting Localhost Origins",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-111922",
"datePublished": "2026-10-17T18:46:35.991Z",
"dateReserved": "2026-10-17T12:19:42.358Z",
"dateUpdated": "2026-10-19T15:00:44.366Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-110737 (GCVE-0-2026-110737)
Vulnerability from cvelistv5 – Published: 2026-10-27 10:26 – Updated: 2026-11-04 16:47
VLAI
EPSS
VEX
Title
Push Endpoint Returns Permissive CORS Headers
Summary
The push endpoint of a Vaadin application that uses server push reflects the request Origin into the Access-Control-Allow-Origin response header and allows credentials, because Flow configures Atmosphere with DROP_ACCESS_CONTROL_ALLOW_ORIGIN_HEADER set to false and its CorsInterceptor then echoes whatever Origin the request carries. A page on any origin can therefore make a cross origin request to that endpoint with the user's cookies and read the response, although reading anything useful also requires the push identifier of that session. Applications that do not use @Push are not affected, and neither is the WebSocket transport. The behaviour was introduced in January 2015 and is present in every Flow release and in Vaadin Framework from 7.1.0, which is when push was added.
Users of affected versions should apply the following mitigation or upgrade. Releases that have fixed this issue include:
Product version
Vaadin 14.14.0 - 14.14.7
Vaadin 23.6.0 - 23.6.16
Vaadin 24.4.0 - 24.4.25
Vaadin 24.5.0 - 24.5.15
Vaadin 24.6.0 - 24.6.13
Vaadin 24.7.0 - 24.7.16
Vaadin 24.8.0 - 24.8.17
Vaadin 24.9.0 - 24.9.23
Vaadin 24.10.0 - 24.10.11
Vaadin 25.0.0 - 25.0.13
Vaadin 25.1.0 - 25.1.13
Vaadin 25.2.0 - 25.2.10
Vaadin 25.3.0 - 25.3.2
Vaadin Framework 7.1.0 - 7.7.54
Vaadin Framework 8.0.0 - 8.32.1
Mitigation
Upgrade to 14.14.8
Upgrade to 23.6.17
Upgrade to 24.4.26
Upgrade to 24.7.17
Upgrade to 24.7.17
Upgrade to 24.7.17
Upgrade to 24.9.24
Upgrade to 24.9.24
Upgrade to 24.10.12
Upgrade to 25.2.11
Upgrade to 25.2.11
Upgrade to 25.2.11
Upgrade to 25.3.3
Upgrade to 7.7.55
Upgrade to 8.32.2
Please note that Vaadin versions 10-13 and 15-22 are no longer supported and you should update either to the latest 14, 23, 24, 25 version.
Artifacts under com.vaadin
Maven coordinates / Vulnerable versions / Fixed version
vaadin / 14.14.0 - 14.14.7 / >=14.14.8
vaadin / 23.6.0 - 23.6.16 / >=23.6.17
vaadin / 24.4.0 - 24.4.25 / >=24.4.26
vaadin / 24.5.0 - 24.5.15 / >=24.7.17
vaadin / 24.6.0 - 24.6.13 / >=24.7.17
vaadin / 24.7.0 - 24.7.16 / >=24.7.17
vaadin / 24.8.0 - 24.8.17 / >=24.9.24
vaadin / 24.9.0 - 24.9.23 / >=24.9.24
vaadin / 24.10.0 - 24.10.11 / >=24.10.12
vaadin / 25.0.0 - 25.0.13 / >=25.2.11
vaadin / 25.1.0 - 25.1.13 / >=25.2.11
vaadin / 25.2.0 - 25.2.10 / >=25.2.11
vaadin / 25.3.0 - 25.3.2 / >=25.3.3
vaadin-core / 14.14.0 - 14.14.7 / >=14.14.8
vaadin-core / 23.6.0 - 23.6.16 / >=23.6.17
vaadin-core / 24.4.0 - 24.4.25 / >=24.4.26
vaadin-core / 24.5.0 - 24.5.15 / >=24.7.17
vaadin-core / 24.6.0 - 24.6.13 / >=24.7.17
vaadin-core / 24.7.0 - 24.7.16 / >=24.7.17
vaadin-core / 24.8.0 - 24.8.17 / >=24.9.24
vaadin-core / 24.9.0 - 24.9.23 / >=24.9.24
vaadin-core / 24.10.0 - 24.10.11 / >=24.10.12
vaadin-core / 25.0.0 - 25.0.13 / >=25.2.11
vaadin-core / 25.1.0 - 25.1.13 / >=25.2.11
vaadin-core / 25.2.0 - 25.2.10 / >=25.2.11
vaadin-core / 25.3.0 - 25.3.2 / >=25.3.3
flow-server / 2.13.0 - 2.13.7 / >=2.13.8
flow-server / 23.6.0 - 23.6.15 / >=23.6.16
flow-server / 24.4.0 - 24.4.18 / >=24.4.19
flow-server / 24.5.0 - 24.5.17 / >=24.7.17
flow-server / 24.6.0 - 24.6.14 / >=24.7.17
flow-server / 24.7.0 - 24.7.15 / >=24.7.16
flow-server / 24.8.0 - 24.8.16 / >=24.9.24
flow-server / 24.9.0 - 24.9.28 / >=24.9.29
flow-server / 24.10.0 - 24.10.14 / >=24.10.15
flow-server / 25.0.0 - 25.0.15 / >=25.2.11
flow-server / 25.1.0 - 25.1.18 / >=25.1.19
flow-server / 25.2.0 - 25.2.12 / >=25.2.13
flow-server / 25.3.0 - 25.3.3 / >=25.3.4
vaadin-server / 7.1.0 - 7.7.54 / >=7.7.55
vaadin-server / 8.0.0 - 8.32.1 / >=8.32.2
vaadin-server-mpr-jakarta / 7.7.36 - 7.7.54 / >=7.7.55
vaadin-server-mpr-jakarta / 8.18.0 - 8.32.1 / >=8.32.2
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-04 16:46 UTC
CWE
Assigner
Vaadin
CNA
References
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| vaadin | vaadin |
Affected:
14.14.0 , < 14.14.8
(maven)
Affected: 23.6.0 , < 23.6.17 (maven) Affected: 24.4.0 , < 24.4.26 (maven) Affected: 24.5.0 , ≤ 24.5.15 (maven) Affected: 24.6.0 , ≤ 24.6.13 (maven) Affected: 24.7.0 , < 24.7.17 (maven) Affected: 24.8.0 , ≤ 24.8.17 (maven) Affected: 24.9.0 , < 24.9.24 (maven) Affected: 24.10.0 , < 24.10.12 (maven) Affected: 25.0.0 , ≤ 25.0.13 (maven) Affected: 25.1.0 , ≤ 25.1.13 (maven) Affected: 25.2.0 , < 25.2.11 (maven) Affected: 25.3.0 , < 25.3.3 (maven) |
|
| vaadin | flow |
Affected:
2.13.0 , < 2.13.8
(maven)
Affected: 23.6.0 , < 23.6.16 (maven) Affected: 24.4.0 , < 24.4.19 (maven) Affected: 24.5.0 , ≤ 24.5.17 (maven) Affected: 24.6.0 , ≤ 24.6.14 (maven) Affected: 24.7.0 , < 24.7.16 (maven) Affected: 24.8.0 , ≤ 24.8.16 (maven) Affected: 24.9.0 , < 24.9.29 (maven) Affected: 24.10.0 , < 24.10.15 (maven) Affected: 25.0.0 , ≤ 25.0.15 (maven) Affected: 25.1.0 , < 25.1.19 (maven) Affected: 25.2.0 , < 25.2.13 (maven) Affected: 25.3.0 , < 25.3.4 (maven) |
|
| vaadin | framework |
Affected:
7.1.0 , < 7.7.55
(maven)
Affected: 8.0.0 , < 8.32.2 (maven) |
|
| vaadin | framework |
Affected:
7.7.36 , < 7.7.55
(maven)
Affected: 8.18.0 , < 8.32.2 (maven) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-110737",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-04T16:46:47.088489Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-04T16:47:27.997Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/vaadin/flow/issues/26214"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"collectionURL": "https://repo.maven.apache.org/maven2",
"defaultStatus": "unaffected",
"packageName": "com.vaadin:vaadin",
"product": "vaadin",
"repo": "https://github.com/vaadin/platform",
"vendor": "vaadin",
"versions": [
{
"lessThan": "14.14.8",
"status": "affected",
"version": "14.14.0",
"versionType": "maven"
},
{
"lessThan": "23.6.17",
"status": "affected",
"version": "23.6.0",
"versionType": "maven"
},
{
"lessThan": "24.4.26",
"status": "affected",
"version": "24.4.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "24.5.15",
"status": "affected",
"version": "24.5.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "24.6.13",
"status": "affected",
"version": "24.6.0",
"versionType": "maven"
},
{
"lessThan": "24.7.17",
"status": "affected",
"version": "24.7.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "24.8.17",
"status": "affected",
"version": "24.8.0",
"versionType": "maven"
},
{
"lessThan": "24.9.24",
"status": "affected",
"version": "24.9.0",
"versionType": "maven"
},
{
"lessThan": "24.10.12",
"status": "affected",
"version": "24.10.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "25.0.13",
"status": "affected",
"version": "25.0.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "25.1.13",
"status": "affected",
"version": "25.1.0",
"versionType": "maven"
},
{
"lessThan": "25.2.11",
"status": "affected",
"version": "25.2.0",
"versionType": "maven"
},
{
"lessThan": "25.3.3",
"status": "affected",
"version": "25.3.0",
"versionType": "maven"
}
]
},
{
"collectionURL": "https://repo.maven.apache.org/maven2",
"defaultStatus": "unaffected",
"packageName": "com.vaadin:vaadin-core",
"product": "vaadin",
"repo": "https://github.com/vaadin/platform",
"vendor": "vaadin",
"versions": [
{
"lessThan": "14.14.8",
"status": "affected",
"version": "14.14.0",
"versionType": "maven"
},
{
"lessThan": "23.6.17",
"status": "affected",
"version": "23.6.0",
"versionType": "maven"
},
{
"lessThan": "24.4.26",
"status": "affected",
"version": "24.4.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "24.5.15",
"status": "affected",
"version": "24.5.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "24.6.13",
"status": "affected",
"version": "24.6.0",
"versionType": "maven"
},
{
"lessThan": "24.7.17",
"status": "affected",
"version": "24.7.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "24.8.17",
"status": "affected",
"version": "24.8.0",
"versionType": "maven"
},
{
"lessThan": "24.9.24",
"status": "affected",
"version": "24.9.0",
"versionType": "maven"
},
{
"lessThan": "24.10.12",
"status": "affected",
"version": "24.10.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "25.0.13",
"status": "affected",
"version": "25.0.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "25.1.13",
"status": "affected",
"version": "25.1.0",
"versionType": "maven"
},
{
"lessThan": "25.2.11",
"status": "affected",
"version": "25.2.0",
"versionType": "maven"
},
{
"lessThan": "25.3.3",
"status": "affected",
"version": "25.3.0",
"versionType": "maven"
}
]
},
{
"collectionURL": "https://repo.maven.apache.org/maven2",
"defaultStatus": "unaffected",
"packageName": "com.vaadin:flow-server",
"product": "flow",
"repo": "https://github.com/vaadin/flow",
"vendor": "vaadin",
"versions": [
{
"lessThan": "2.13.8",
"status": "affected",
"version": "2.13.0",
"versionType": "maven"
},
{
"lessThan": "23.6.16",
"status": "affected",
"version": "23.6.0",
"versionType": "maven"
},
{
"lessThan": "24.4.19",
"status": "affected",
"version": "24.4.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "24.5.17",
"status": "affected",
"version": "24.5.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "24.6.14",
"status": "affected",
"version": "24.6.0",
"versionType": "maven"
},
{
"lessThan": "24.7.16",
"status": "affected",
"version": "24.7.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "24.8.16",
"status": "affected",
"version": "24.8.0",
"versionType": "maven"
},
{
"lessThan": "24.9.29",
"status": "affected",
"version": "24.9.0",
"versionType": "maven"
},
{
"lessThan": "24.10.15",
"status": "affected",
"version": "24.10.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "25.0.15",
"status": "affected",
"version": "25.0.0",
"versionType": "maven"
},
{
"lessThan": "25.1.19",
"status": "affected",
"version": "25.1.0",
"versionType": "maven"
},
{
"lessThan": "25.2.13",
"status": "affected",
"version": "25.2.0",
"versionType": "maven"
},
{
"lessThan": "25.3.4",
"status": "affected",
"version": "25.3.0",
"versionType": "maven"
}
]
},
{
"collectionURL": "https://repo.maven.apache.org/maven2",
"defaultStatus": "unaffected",
"packageName": "com.vaadin:vaadin-server",
"product": "framework",
"repo": "https://github.com/vaadin/framework",
"vendor": "vaadin",
"versions": [
{
"lessThan": "7.7.55",
"status": "affected",
"version": "7.1.0",
"versionType": "maven"
},
{
"lessThan": "8.32.2",
"status": "affected",
"version": "8.0.0",
"versionType": "maven"
}
]
},
{
"collectionURL": "https://repo.maven.apache.org/maven2",
"defaultStatus": "unaffected",
"packageName": "com.vaadin:vaadin-server-mpr-jakarta",
"product": "framework",
"repo": "https://github.com/vaadin/framework",
"vendor": "vaadin",
"versions": [
{
"lessThan": "7.7.55",
"status": "affected",
"version": "7.7.36",
"versionType": "maven"
},
{
"lessThan": "8.32.2",
"status": "affected",
"version": "8.18.0",
"versionType": "maven"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgba(232, 232, 232, 0.04);\"\u003eThe push endpoint of a Vaadin application that uses server push reflects the request Origin into the Access-Control-Allow-Origin response header and allows credentials, because Flow configures Atmosphere with DROP_ACCESS_CONTROL_ALLOW_ORIGIN_HEADER set to false and its CorsInterceptor then echoes whatever Origin the request carries. A page on any origin can therefore make a cross origin request to that endpoint with the user\u0027s cookies and read the response, although reading anything useful also requires the push identifier of that session. Applications that do not use @Push are not affected, and neither is the WebSocket transport. The behaviour was introduced in January 2015 and is present in every Flow release and in Vaadin Framework from 7.1.0, which is when push was added.\u003cbr\u003e\u003cbr\u003e\u003cbr\u003eUsers of affected versions should apply the following mitigation or upgrade. Releases that have fixed this issue include:\u003cbr\u003e\u003cbr\u003eProduct version\u003cbr\u003eVaadin 14.14.0 - 14.14.7\u003cbr\u003eVaadin 23.6.0 - 23.6.16\u003cbr\u003eVaadin 24.4.0 - 24.4.25\u003cbr\u003eVaadin 24.5.0 - 24.5.15\u003cbr\u003eVaadin 24.6.0 - 24.6.13\u003cbr\u003eVaadin 24.7.0 - 24.7.16\u003cbr\u003eVaadin 24.8.0 - 24.8.17\u003cbr\u003eVaadin 24.9.0 - 24.9.23\u003cbr\u003eVaadin 24.10.0 - 24.10.11\u003cbr\u003eVaadin 25.0.0 - 25.0.13\u003cbr\u003eVaadin 25.1.0 - 25.1.13\u003cbr\u003eVaadin 25.2.0 - 25.2.10\u003cbr\u003eVaadin 25.3.0 - 25.3.2\u003cbr\u003eVaadin Framework 7.1.0 - 7.7.54\u003cbr\u003eVaadin Framework 8.0.0 - 8.32.1\u003cbr\u003e\u003cbr\u003eMitigation\u003cbr\u003eUpgrade to 14.14.8\u003cbr\u003eUpgrade to 23.6.17\u003cbr\u003eUpgrade to 24.4.26\u003cbr\u003eUpgrade to 24.7.17\u003cbr\u003eUpgrade to 24.7.17\u003cbr\u003eUpgrade to 24.7.17\u003cbr\u003eUpgrade to 24.9.24\u003cbr\u003eUpgrade to 24.9.24\u003cbr\u003eUpgrade to 24.10.12\u003cbr\u003eUpgrade to 25.2.11\u003cbr\u003eUpgrade to 25.2.11\u003cbr\u003eUpgrade to 25.2.11\u003cbr\u003eUpgrade to 25.3.3\u003cbr\u003eUpgrade to 7.7.55\u003cbr\u003eUpgrade to 8.32.2\u003cbr\u003e\u003cbr\u003ePlease note that Vaadin versions 10-13 and 15-22 are no longer supported and you should update either to the latest 14, 23, 24, 25 version.\u003cbr\u003e\u003cbr\u003eArtifacts\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eMaven coordinates\u003c/td\u003e\u003ctd\u003eVulnerable versions\u003c/td\u003e\u003ctd\u003eFixed version\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e14.14.0 - 14.14.7\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;14.14.8\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e23.6.0 - 23.6.16\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;23.6.17\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.4.0 - 24.4.25\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.4.26\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.5.0 - 24.5.15\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.7.17\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.6.0 - 24.6.13\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.7.17\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.7.0 - 24.7.16\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.7.17\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.8.0 - 24.8.17\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.9.24\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.9.0 - 24.9.23\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.9.24\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.10.0 - 24.10.11\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.10.12\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e25.0.0 - 25.0.13\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;25.2.11\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e25.1.0 - 25.1.13\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;25.2.11\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e25.2.0 - 25.2.10\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;25.2.11\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e25.3.0 - 25.3.2\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;25.3.3\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-core\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e14.14.0 - 14.14.7\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;14.14.8\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-core\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e23.6.0 - 23.6.16\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;23.6.17\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-core\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.4.0 - 24.4.25\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.4.26\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-core\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.5.0 - 24.5.15\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.7.17\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-core\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.6.0 - 24.6.13\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.7.17\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-core\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.7.0 - 24.7.16\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.7.17\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-core\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.8.0 - 24.8.17\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.9.24\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-core\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.9.0 - 24.9.23\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.9.24\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-core\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.10.0 - 24.10.11\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.10.12\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-core\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e25.0.0 - 25.0.13\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;25.2.11\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-core\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e25.1.0 - 25.1.13\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;25.2.11\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-core\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e25.2.0 - 25.2.10\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;25.2.11\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-core\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e25.3.0 - 25.3.2\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;25.3.3\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:flow-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e2.13.0 - 2.13.7\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;2.13.8\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:flow-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e23.6.0 - 23.6.15\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;23.6.16\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:flow-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.4.0 - 24.4.18\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.4.19\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:flow-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.5.0 - 24.5.17\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.7.17\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:flow-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.6.0 - 24.6.14\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.7.17\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:flow-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.7.0 - 24.7.15\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.7.16\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:flow-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.8.0 - 24.8.16\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.9.24\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:flow-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.9.0 - 24.9.28\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.9.29\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:flow-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.10.0 - 24.10.14\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.10.15\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:flow-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e25.0.0 - 25.0.15\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;25.2.11\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:flow-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e25.1.0 - 25.1.18\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;25.1.19\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:flow-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e25.2.0 - 25.2.12\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;25.2.13\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:flow-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e25.3.0 - 25.3.3\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;25.3.4\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e7.1.0 - 7.7.54\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;7.7.55\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e8.0.0 - 8.32.1\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;8.32.2\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-server-mpr-jakarta\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e7.7.36 - 7.7.54\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;7.7.55\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-server-mpr-jakarta\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e8.18.0 - 8.32.1\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;8.32.2\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/span\u003e"
}
],
"value": "The push endpoint of a Vaadin application that uses server push reflects the request Origin into the Access-Control-Allow-Origin response header and allows credentials, because Flow configures Atmosphere with DROP_ACCESS_CONTROL_ALLOW_ORIGIN_HEADER set to false and its CorsInterceptor then echoes whatever Origin the request carries. A page on any origin can therefore make a cross origin request to that endpoint with the user\u0027s cookies and read the response, although reading anything useful also requires the push identifier of that session. Applications that do not use @Push are not affected, and neither is the WebSocket transport. The behaviour was introduced in January 2015 and is present in every Flow release and in Vaadin Framework from 7.1.0, which is when push was added.\n\n\nUsers of affected versions should apply the following mitigation or upgrade. Releases that have fixed this issue include:\n\nProduct version\nVaadin 14.14.0 - 14.14.7\nVaadin 23.6.0 - 23.6.16\nVaadin 24.4.0 - 24.4.25\nVaadin 24.5.0 - 24.5.15\nVaadin 24.6.0 - 24.6.13\nVaadin 24.7.0 - 24.7.16\nVaadin 24.8.0 - 24.8.17\nVaadin 24.9.0 - 24.9.23\nVaadin 24.10.0 - 24.10.11\nVaadin 25.0.0 - 25.0.13\nVaadin 25.1.0 - 25.1.13\nVaadin 25.2.0 - 25.2.10\nVaadin 25.3.0 - 25.3.2\nVaadin Framework 7.1.0 - 7.7.54\nVaadin Framework 8.0.0 - 8.32.1\n\nMitigation\nUpgrade to 14.14.8\nUpgrade to 23.6.17\nUpgrade to 24.4.26\nUpgrade to 24.7.17\nUpgrade to 24.7.17\nUpgrade to 24.7.17\nUpgrade to 24.9.24\nUpgrade to 24.9.24\nUpgrade to 24.10.12\nUpgrade to 25.2.11\nUpgrade to 25.2.11\nUpgrade to 25.2.11\nUpgrade to 25.3.3\nUpgrade to 7.7.55\nUpgrade to 8.32.2\n\nPlease note that Vaadin versions 10-13 and 15-22 are no longer supported and you should update either to the latest 14, 23, 24, 25 version.\n\nArtifacts under com.vaadin\nMaven coordinates / Vulnerable versions / Fixed version\nvaadin / 14.14.0 - 14.14.7 / \u003e=14.14.8\nvaadin / 23.6.0 - 23.6.16 / \u003e=23.6.17\nvaadin / 24.4.0 - 24.4.25 / \u003e=24.4.26\nvaadin / 24.5.0 - 24.5.15 / \u003e=24.7.17\nvaadin / 24.6.0 - 24.6.13 / \u003e=24.7.17\nvaadin / 24.7.0 - 24.7.16 / \u003e=24.7.17\nvaadin / 24.8.0 - 24.8.17 / \u003e=24.9.24\nvaadin / 24.9.0 - 24.9.23 / \u003e=24.9.24\nvaadin / 24.10.0 - 24.10.11 / \u003e=24.10.12\nvaadin / 25.0.0 - 25.0.13 / \u003e=25.2.11\nvaadin / 25.1.0 - 25.1.13 / \u003e=25.2.11\nvaadin / 25.2.0 - 25.2.10 / \u003e=25.2.11\nvaadin / 25.3.0 - 25.3.2 / \u003e=25.3.3\nvaadin-core / 14.14.0 - 14.14.7 / \u003e=14.14.8\nvaadin-core / 23.6.0 - 23.6.16 / \u003e=23.6.17\nvaadin-core / 24.4.0 - 24.4.25 / \u003e=24.4.26\nvaadin-core / 24.5.0 - 24.5.15 / \u003e=24.7.17\nvaadin-core / 24.6.0 - 24.6.13 / \u003e=24.7.17\nvaadin-core / 24.7.0 - 24.7.16 / \u003e=24.7.17\nvaadin-core / 24.8.0 - 24.8.17 / \u003e=24.9.24\nvaadin-core / 24.9.0 - 24.9.23 / \u003e=24.9.24\nvaadin-core / 24.10.0 - 24.10.11 / \u003e=24.10.12\nvaadin-core / 25.0.0 - 25.0.13 / \u003e=25.2.11\nvaadin-core / 25.1.0 - 25.1.13 / \u003e=25.2.11\nvaadin-core / 25.2.0 - 25.2.10 / \u003e=25.2.11\nvaadin-core / 25.3.0 - 25.3.2 / \u003e=25.3.3\nflow-server / 2.13.0 - 2.13.7 / \u003e=2.13.8\nflow-server / 23.6.0 - 23.6.15 / \u003e=23.6.16\nflow-server / 24.4.0 - 24.4.18 / \u003e=24.4.19\nflow-server / 24.5.0 - 24.5.17 / \u003e=24.7.17\nflow-server / 24.6.0 - 24.6.14 / \u003e=24.7.17\nflow-server / 24.7.0 - 24.7.15 / \u003e=24.7.16\nflow-server / 24.8.0 - 24.8.16 / \u003e=24.9.24\nflow-server / 24.9.0 - 24.9.28 / \u003e=24.9.29\nflow-server / 24.10.0 - 24.10.14 / \u003e=24.10.15\nflow-server / 25.0.0 - 25.0.15 / \u003e=25.2.11\nflow-server / 25.1.0 - 25.1.18 / \u003e=25.1.19\nflow-server / 25.2.0 - 25.2.12 / \u003e=25.2.13\nflow-server / 25.3.0 - 25.3.3 / \u003e=25.3.4\nvaadin-server / 7.1.0 - 7.7.54 / \u003e=7.7.55\nvaadin-server / 8.0.0 - 8.32.1 / \u003e=8.32.2\nvaadin-server-mpr-jakarta / 7.7.36 - 7.7.54 / \u003e=7.7.55\nvaadin-server-mpr-jakarta / 8.18.0 - 8.32.1 / \u003e=8.32.2"
}
],
"impacts": [
{
"capecId": "CAPEC-468",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-468 Generic Cross-Browser Cross-Domain Theft"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NO",
"Recovery": "AUTOMATIC",
"Safety": "NEGLIGIBLE",
"attackComplexity": "HIGH",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 2.3,
"baseSeverity": "LOW",
"privilegesRequired": "NONE",
"providerUrgency": "CLEAR",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "PASSIVE",
"valueDensity": "DIFFUSE",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "LOW"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-942",
"description": "CWE-942 Permissive Cross-domain Policy with Untrusted Domains",
"lang": "en",
"type": "CWE"
},
{
"cweId": "CWE-346",
"description": "CWE-346 Origin Validation Error",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T13:03:37.752Z",
"orgId": "9e0f3122-90e9-42d5-93de-8c6b98deef7e",
"shortName": "Vaadin"
},
"references": [
{
"url": "https://vaadin.com/security/cve-2026-110737"
},
{
"url": "https://github.com/vaadin/flow/issues/26214"
},
{
"url": "https://github.com/vaadin/flow/pull/26215"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cb\u003e\u003cspan style=\"background-color: transparent;\"\u003eUsers of affected versions should apply the following mitigation or upgrade.\u003c/span\u003e\u003c/b\u003e\u003cbr\u003e"
}
],
"value": "Users of affected versions should apply the following mitigation or upgrade."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Push Endpoint Returns Permissive CORS Headers",
"workarounds": [
{
"lang": "en",
"value": "Set the servlet init parameter org.atmosphere.cpr.dropAccessControlAllowOriginHeader to true on the Vaadin servlet, which stops the header being emitted without upgrading. In a Spring Boot application the Vaadin servlet has to be registered explicitly for the parameter to be applied."
}
],
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "9e0f3122-90e9-42d5-93de-8c6b98deef7e",
"assignerShortName": "Vaadin",
"cveId": "CVE-2026-110737",
"datePublished": "2026-10-27T10:26:37.752Z",
"dateReserved": "2026-10-14T16:07:47.846Z",
"dateUpdated": "2026-11-04T16:47:27.997Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108372 (GCVE-0-2026-108372)
Vulnerability from cvelistv5 – Published: 2026-10-16 21:29 – Updated: 2026-10-21 21:31
VLAI
EPSS
VEX
Title
LoopX serve-status permissive CORS policy exposes control-plane state and private Markdown files
Summary
Open and provider-neutral, LoopX is a lightweight state kernel and local-first control plane for loop engineering. From version 0.0.1 until 0.4.5, `loopx serve-status` in `loopx/status_server.py` uses `StatusRequestHandler._send_json()` and `do_OPTIONS()` to send `Access-Control-Allow-Origin: *` for unauthenticated responses on predictable loopback ports. A remote attacker can cause an operator who visits attacker-controlled web content to issue cross-origin requests to `GET /status.json`, `GET /review-material?goal_id=...&path=...`, `GET /`, and `POST /control-plane/configure-goal/dry-run`, exposing control-plane state, goal and run information, local absolute paths, private Markdown files below registered goal roots, and dry-run configuration projections. The affected routes do not provide cross-origin writes or arbitrary-file access. This issue is fixed in version 0.4.5.
Severity
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 21:31 UTC
CWE
Assigner
GitHub_M
CNA
References
4 references
| URL | Tags |
|---|---|
| https://github.com/loopx-project/loopx/security/a… | x_refsource_CONFIRM |
| https://github.com/loopx-project/loopx/pull/3137 | x_refsource_MISC |
| https://github.com/loopx-project/loopx/commit/838… | x_refsource_MISC |
| https://github.com/loopx-project/loopx/releases/t… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| huangruiteng | loopx |
Affected:
>= 0.0.1, < 0.4.5
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-108372",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T21:31:14.085436Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T21:31:36.971Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/loopx-project/loopx/security/advisories/GHSA-vx2m-gpq4-8j5q"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "loopx",
"vendor": "huangruiteng",
"versions": [
{
"status": "affected",
"version": "\u003e= 0.0.1, \u003c 0.4.5"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Open and provider-neutral, LoopX is a lightweight state kernel and local-first control plane for loop engineering. From version 0.0.1 until 0.4.5, `loopx serve-status` in `loopx/status_server.py` uses `StatusRequestHandler._send_json()` and `do_OPTIONS()` to send `Access-Control-Allow-Origin: *` for unauthenticated responses on predictable loopback ports. A remote attacker can cause an operator who visits attacker-controlled web content to issue cross-origin requests to `GET /status.json`, `GET /review-material?goal_id=...\u0026path=...`, `GET /`, and `POST /control-plane/configure-goal/dry-run`, exposing control-plane state, goal and run information, local absolute paths, private Markdown files below registered goal roots, and dry-run configuration projections. The affected routes do not provide cross-origin writes or arbitrary-file access. This issue is fixed in version 0.4.5."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"privilegesRequired": "NONE",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "PASSIVE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-346",
"description": "CWE-346: Origin Validation Error",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-942",
"description": "CWE-942: Permissive Cross-domain Policy with Untrusted Domains",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-16T21:29:13.757Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/loopx-project/loopx/security/advisories/GHSA-vx2m-gpq4-8j5q",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/loopx-project/loopx/security/advisories/GHSA-vx2m-gpq4-8j5q"
},
{
"name": "https://github.com/loopx-project/loopx/pull/3137",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/loopx-project/loopx/pull/3137"
},
{
"name": "https://github.com/loopx-project/loopx/commit/838720fba42bd22f71b5bb763ec406f7bdf4c940",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/loopx-project/loopx/commit/838720fba42bd22f71b5bb763ec406f7bdf4c940"
},
{
"name": "https://github.com/loopx-project/loopx/releases/tag/v0.4.5",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/loopx-project/loopx/releases/tag/v0.4.5"
}
],
"source": {
"advisory": "GHSA-vx2m-gpq4-8j5q",
"discovery": "UNKNOWN"
},
"title": "LoopX serve-status permissive CORS policy exposes control-plane state and private Markdown files"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-108372",
"datePublished": "2026-10-16T21:29:13.757Z",
"dateReserved": "2026-10-09T21:36:27.042Z",
"dateUpdated": "2026-10-21T21:31:36.971Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-107858 (GCVE-0-2026-107858)
Vulnerability from cvelistv5 – Published: 2026-10-23 05:08 – Updated: 2026-11-02 12:43
VLAI
EPSS
VEX
Title
Cross-Site WebSocket Hijacking and Permissive CORS in Google Agent Development Kit (ADK) for Java Development Server
Summary
Missing Origin Validation in WebSockets (CWE-1385) and Permissive Cross-domain Policy with Untrusted Domains (CWE-942) in the development web server (ADK Web) in Google Agent Development Kit (ADK) for Java (com.google.adk:google-adk-dev versions 0.1.0 before 1.13.0 and com.google.adk:google-adk-maven-plugin versions 0.3.0 before 1.13.0) allow a remote attacker to control a locally running agent and read its data via a malicious web page visited by a developer while the server is running. The /run_live WebSocket endpoint accepts connections from any origin by default (hardcoded via setAllowedOrigins("*") in versions 0.1.0 through 1.5.0, and defaulting to * via adk.web.cors.origins in versions 1.6.0 through 1.12.0), and since version 0.4.0 the REST API returns Access-Control-Allow-Origin: * by default. Because the server has no authentication and requests originate from the developer's browser (so binding to localhost does not prevent exploitation), a cross-origin page can send messages to the agent (triggering registered tools), stream agent responses, and list, read, create, or delete sessions and artifacts. In versions 1.6.0 through 1.12.0, users can mitigate the issue by setting the adk.web.cors.origins property to an explicit allowlist of trusted origins (such as http://localhost:8000). The vulnerability is fixed in version 1.13.0, which enforces a same-origin default for CORS and the /run_live WebSocket endpoint, and rejects DNS-rebinding requests over loopback.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-02 12:43 UTC
CWE
Assigner
Google
CNA
References
7 references
| URL | Tags |
|---|---|
| https://github.com/google/adk-java/issues/1257 | issue-trackingexploit |
| https://github.com/google/adk-java/releases/tag/v1.13.0 | release-notes |
| https://github.com/google/adk-java/commit/5667d38… | patch |
| https://github.com/google/adk-java/commit/1ae5078… | patch |
| https://github.com/google/adk-java/pull/1222 | mitigationpatch |
| https://github.com/google/adk-java/commit/c2b087c… | mitigationpatch |
| https://github.com/google/adk-java/releases/tag/v1.6.0 | release-notes |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Agent Development Kit (ADK) for Java |
Affected:
0.1.0 , < 1.13.0
(semver)
|
||
| Agent Development Kit (ADK) for Java |
Affected:
0.3.0 , < 1.13.0
(semver)
|
Date Public
2026-06-11 10:31
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-107858",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-02T12:43:09.133780Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-02T12:43:40.614Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageName": "com.google.adk:google-adk-dev",
"product": "Agent Development Kit (ADK) for Java",
"repo": "https://github.com/google/adk-java",
"vendor": "Google",
"versions": [
{
"lessThan": "1.13.0",
"status": "affected",
"version": "0.1.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"packageName": "com.google.adk:google-adk-maven-plugin",
"product": "Agent Development Kit (ADK) for Java",
"repo": "https://github.com/google/adk-java",
"vendor": "Google",
"versions": [
{
"lessThan": "1.13.0",
"status": "affected",
"version": "0.3.0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "George Chen (@geo-chen)"
},
{
"lang": "en",
"type": "finder",
"value": "Gouri Sankar A (@g0w6y)"
}
],
"datePublic": "2026-06-11T10:31:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eMissing Origin Validation in WebSockets (CWE-1385) and Permissive Cross-domain Policy with Untrusted Domains (CWE-942) in the development web server (ADK Web) in Google Agent Development Kit (ADK) for Java (\u003ccode\u003ecom.google.adk:google-adk-dev\u003c/code\u003e versions 0.1.0 before 1.13.0 and \u003ccode\u003ecom.google.adk:google-adk-maven-plugin\u003c/code\u003e versions 0.3.0 before 1.13.0) allow a remote attacker to control a locally running agent and read its data via a malicious web page visited by a developer while the server is running. The \u003ccode\u003e/run_live\u003c/code\u003e WebSocket endpoint accepts connections from any origin by default (hardcoded via \u003ccode\u003esetAllowedOrigins(\"*\")\u003c/code\u003e in versions 0.1.0 through 1.5.0, and defaulting to \u003ccode\u003e*\u003c/code\u003e via \u003ccode\u003eadk.web.cors.origins\u003c/code\u003e in versions 1.6.0 through 1.12.0), and since version 0.4.0 the REST API returns \u003ccode\u003eAccess-Control-Allow-Origin: *\u003c/code\u003e by default. Because the server has no authentication and requests originate from the developer\u0027s browser (so binding to localhost does not prevent exploitation), a cross-origin page can send messages to the agent (triggering registered tools), stream agent responses, and list, read, create, or delete sessions and artifacts. In versions 1.6.0 through 1.12.0, users can mitigate the issue by setting the \u003ccode\u003eadk.web.cors.origins\u003c/code\u003e property to an explicit allowlist of trusted origins (such as \u003ccode\u003ehttp://localhost:8000\u003c/code\u003e). The vulnerability is fixed in version 1.13.0, which enforces a same-origin default for CORS and the \u003ccode\u003e/run_live\u003c/code\u003e WebSocket endpoint, and rejects DNS-rebinding requests over loopback.\u003c/p\u003e"
}
],
"value": "Missing Origin Validation in WebSockets (CWE-1385) and Permissive Cross-domain Policy with Untrusted Domains (CWE-942) in the development web server (ADK Web) in Google Agent Development Kit (ADK) for Java (com.google.adk:google-adk-dev versions 0.1.0 before 1.13.0 and com.google.adk:google-adk-maven-plugin versions 0.3.0 before 1.13.0) allow a remote attacker to control a locally running agent and read its data via a malicious web page visited by a developer while the server is running. The /run_live WebSocket endpoint accepts connections from any origin by default (hardcoded via setAllowedOrigins(\"*\") in versions 0.1.0 through 1.5.0, and defaulting to * via adk.web.cors.origins in versions 1.6.0 through 1.12.0), and since version 0.4.0 the REST API returns Access-Control-Allow-Origin: * by default. Because the server has no authentication and requests originate from the developer\u0027s browser (so binding to localhost does not prevent exploitation), a cross-origin page can send messages to the agent (triggering registered tools), stream agent responses, and list, read, create, or delete sessions and artifacts. In versions 1.6.0 through 1.12.0, users can mitigate the issue by setting the adk.web.cors.origins property to an explicit allowlist of trusted origins (such as http://localhost:8000). The vulnerability is fixed in version 1.13.0, which enforces a same-origin default for CORS and the /run_live WebSocket endpoint, and rejects DNS-rebinding requests over loopback."
}
],
"impacts": [
{
"capecId": "CAPEC-62",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-62 Cross Site Request Forgery"
}
]
},
{
"capecId": "CAPEC-115",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-115 Authentication Bypass"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "PASSIVE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1385",
"description": "CWE-1385 Missing Origin Validation in WebSockets",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-942",
"description": "CWE-942 Permissive Cross-domain Policy with Untrusted Domains",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306 Missing Authentication for Critical Function",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-23T05:08:46.087Z",
"orgId": "14ed7db2-1595-443d-9d34-6215bf890778",
"shortName": "Google"
},
"references": [
{
"tags": [
"issue-tracking",
"exploit"
],
"url": "https://github.com/google/adk-java/issues/1257"
},
{
"tags": [
"release-notes"
],
"url": "https://github.com/google/adk-java/releases/tag/v1.13.0"
},
{
"tags": [
"patch"
],
"url": "https://github.com/google/adk-java/commit/5667d382ab5078a0d6e8f7184713a6bab767e004"
},
{
"tags": [
"patch"
],
"url": "https://github.com/google/adk-java/commit/1ae5078072e13e101318e32833f1db323ef084e1"
},
{
"tags": [
"mitigation",
"patch"
],
"url": "https://github.com/google/adk-java/pull/1222"
},
{
"tags": [
"mitigation",
"patch"
],
"url": "https://github.com/google/adk-java/commit/c2b087cbaf44f44d20dc946d8f2391506a2fce3d"
},
{
"tags": [
"release-notes"
],
"url": "https://github.com/google/adk-java/releases/tag/v1.6.0"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eUpgrade Google Agent Development Kit (ADK) for Java to version 1.13.0 or later.\u003c/p\u003e"
}
],
"value": "Upgrade Google Agent Development Kit (ADK) for Java to version 1.13.0 or later."
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Cross-Site WebSocket Hijacking and Permissive CORS in Google Agent Development Kit (ADK) for Java Development Server",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eFor versions 1.6.0 through 1.12.0, configure the \u003ccode\u003eadk.web.cors.origins\u003c/code\u003e property to an explicit allowlist of trusted origins (for example, \u003ccode\u003ehttp://localhost:8000\u003c/code\u003e) to restrict both the REST API and the \u003ccode\u003e/run_live\u003c/code\u003e WebSocket endpoint.\u003c/p\u003e"
}
],
"value": "For versions 1.6.0 through 1.12.0, configure the adk.web.cors.origins property to an explicit allowlist of trusted origins (for example, http://localhost:8000) to restrict both the REST API and the /run_live WebSocket endpoint."
}
],
"x_generator": {
"engine": "Vulnogram 1.0.2"
}
}
},
"cveMetadata": {
"assignerOrgId": "14ed7db2-1595-443d-9d34-6215bf890778",
"assignerShortName": "Google",
"cveId": "CVE-2026-107858",
"datePublished": "2026-10-23T05:08:46.087Z",
"dateReserved": "2026-10-08T22:58:19.162Z",
"dateUpdated": "2026-11-02T12:43:40.614Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-107155 (GCVE-0-2026-107155)
Vulnerability from cvelistv5 – Published: 2026-11-06 18:50 – Updated: 2026-11-07 04:55
VLAI
EPSS
VEX
Summary
A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to perform unauthorized operations.
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-06 00:00 UTC
CWE
- CWE-942 - Permissive cross-domain security policy with untrusted domains
Assigner
sonicwall
CNA
References
1 reference
| URL | Tags |
|---|---|
| https://psirt.global.sonicwall.com/vuln-detail/SN… | vendor-advisory |
Impacted products
Date Public
2026-11-06 18:40
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-107155",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-06T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-07T04:55:52.900Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"platforms": [
"Gen7",
"Gen8"
],
"product": "SonicOS",
"vendor": "SonicWall",
"versions": [
{
"status": "affected",
"version": "7.3.3-7015 and older versions"
},
{
"status": "affected",
"version": "8.2.2-8015 and older versions"
}
]
}
],
"datePublic": "2026-11-06T18:40:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to perform unauthorized operations."
}
],
"value": "A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to perform unauthorized operations."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-942",
"description": "CWE-942 Permissive cross-domain security policy with untrusted domains",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-06T18:50:03.769Z",
"orgId": "44b2ff79-1416-4492-88bb-ed0da00c7315",
"shortName": "sonicwall"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0014"
}
],
"source": {
"advisory": "SNWLID-2026-0014",
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "44b2ff79-1416-4492-88bb-ed0da00c7315",
"assignerShortName": "sonicwall",
"cveId": "CVE-2026-107155",
"datePublished": "2026-11-06T18:50:03.769Z",
"dateReserved": "2026-10-07T10:39:52.120Z",
"dateUpdated": "2026-11-07T04:55:52.900Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-92359 (GCVE-0-2026-92359)
Vulnerability from cvelistv5 – Published: 2026-09-16 12:00 – Updated: 2026-09-16 13:15 X_Open Source
VLAI
EPSS
VEX
Title
ag-ui-protocol ag-ui CORSMiddleware utils.py create_strands_app cross-domain policy
Summary
A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. The affected element is the function create_strands_app of the file integrations/aws-strands/python/src/ag_ui_strands/utils.py of the component CORSMiddleware. The manipulation results in permissive cross-domain policy with untrusted domains. The attack may be launched remotely. The attack requires a high level of complexity. The exploitability is described as difficult. Upgrading to version AGUI.Abstractions@0.0.6 is sufficient to fix this issue. The patch is identified as 9b143b9668fa52c2054ede9d34a45ac4b4401089. It is suggested to upgrade the affected component.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-16 13:15 UTC
CWE
Assigner
VulDB
CNA
References
9 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/405445 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/405445/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-92359 | third-party-advisory |
| https://vuldb.com/submit/934120 | third-party-advisory |
| https://github.com/ag-ui-protocol/ag-ui/issues/2433 | issue-tracking |
| https://github.com/ag-ui-protocol/ag-ui/pull/2492 | issue-trackingpatch |
| https://github.com/ag-ui-protocol/ag-ui/commit/9b… | patch |
| https://github.com/ag-ui-protocol/ag-ui/releases/… | patch |
| https://github.com/ag-ui-protocol/ag-ui/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| ag-ui-protocol | ag-ui |
Affected:
0.3.0
Unaffected: AGUI.Abstractions@0.0.6 cpe:2.3:a:ag-ui-protocol:ag-ui:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-92359",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-16T13:15:05.598960Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-16T13:15:16.227Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ag-ui-protocol:ag-ui:*:*:*:*:*:*:*:*"
],
"modules": [
"CORSMiddleware"
],
"product": "ag-ui",
"vendor": "ag-ui-protocol",
"versions": [
{
"status": "affected",
"version": "0.3.0"
},
{
"status": "unaffected",
"version": "AGUI.Abstractions@0.0.6"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "colorfullbz (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. The affected element is the function create_strands_app of the file integrations/aws-strands/python/src/ag_ui_strands/utils.py of the component CORSMiddleware. The manipulation results in permissive cross-domain policy with untrusted domains. The attack may be launched remotely. The attack requires a high level of complexity. The exploitability is described as difficult. Upgrading to version AGUI.Abstractions@0.0.6 is sufficient to fix this issue. The patch is identified as 9b143b9668fa52c2054ede9d34a45ac4b4401089. It is suggested to upgrade the affected component."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 2.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:X/RL:O/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:X/RL:O/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 2.6,
"vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N/E:ND/RL:OF/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-942",
"description": "Permissive Cross-domain Policy with Untrusted Domains",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-346",
"description": "Origin Validation Error",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-16T12:00:16.220Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-405445 | ag-ui-protocol ag-ui CORSMiddleware utils.py create_strands_app cross-domain policy",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/405445"
},
{
"name": "VDB-405445 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/405445/cti"
},
{
"name": "CVE-2026-92359 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-92359"
},
{
"name": "Submit #934120 | ag-ui-protocol ag-ui 0.3.0 CWE-942",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/934120"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/ag-ui-protocol/ag-ui/issues/2433"
},
{
"tags": [
"issue-tracking",
"patch"
],
"url": "https://github.com/ag-ui-protocol/ag-ui/pull/2492"
},
{
"tags": [
"patch"
],
"url": "https://github.com/ag-ui-protocol/ag-ui/commit/9b143b9668fa52c2054ede9d34a45ac4b4401089"
},
{
"tags": [
"patch"
],
"url": "https://github.com/ag-ui-protocol/ag-ui/releases/tag/AGUI.Abstractions%400.0.6"
},
{
"tags": [
"product"
],
"url": "https://github.com/ag-ui-protocol/ag-ui/"
}
],
"tags": [
"x_open-source"
],
"timeline": [
{
"lang": "en",
"time": "2026-09-16T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-09-16T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-09-16T07:41:24.000Z",
"value": "VulDB entry last update"
}
],
"title": "ag-ui-protocol ag-ui CORSMiddleware utils.py create_strands_app cross-domain policy",
"x_generator": [
"VulDB PVTS v202609"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-92359",
"datePublished": "2026-09-16T12:00:16.220Z",
"dateReserved": "2026-09-16T05:36:01.573Z",
"dateUpdated": "2026-09-16T13:15:16.227Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-90882 (GCVE-0-2026-90882)
Vulnerability from cvelistv5 – Published: 2026-09-22 09:27 – Updated: 2026-09-22 13:06
VLAI
EPSS
VEX
Title
Reflected arbitrary origins with credentials, allowing cross-origin reads of authenticated user data
Summary
The open-vsx.org deployment returned Access-Control-Allow-Origin reflecting the requesting origin together with Access-Control-Allow-Credentials: true on the authenticated /user/ endpoints. A page on any origin could therefore issue credentialed requests to the service in a logged-in user's browser and read the responses.
This exposed /user (login name, avatar, homepage, tokens URL), /user/tokens, /user/namespaces, /user/extensions, /user/search/{name} and /user/namespace/{name}/members, and — because /user/csrf was readable the same way — allowed the CSRF protection on write endpoints to be defeated. Chaining the two, an attacker page could call /user/token/create and exfiltrate a personal access token carrying publish and delete rights over the victim's namespaces.
The headers were emitted by the CDN/edge layer, not by the application: the Open VSX software sets allowCredentials(true) in exactly one place, against a single exact origin derived from ovsx.webui.url, and defines no CORS mapping on /user/ beyond it. No configuration of the software produces origin reflection with credentials.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-22 13:06 UTC
CWE
Assigner
eclipse
CNA
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Eclipse Foundation | open-vsx.org |
Affected:
29/04/2026 , ≤ 07/09/2026
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-90882",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-22T13:06:04.901059Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-22T13:06:14.742Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "open-vsx.org",
"vendor": "Eclipse Foundation",
"versions": [
{
"lessThanOrEqual": "07/09/2026",
"status": "affected",
"version": "29/04/2026",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "https://github.com/Char0n1507"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eThe open-vsx.org deployment returned Access-Control-Allow-Origin reflecting the requesting origin together with Access-Control-Allow-Credentials: true on the authenticated /user/ endpoints. A page on any origin could therefore issue credentialed requests to the service in a logged-in user\u0027s browser and read the responses.\u003c/p\u003e\u003cp\u003eThis exposed /user (login name, avatar, homepage, tokens URL), /user/tokens, /user/namespaces, /user/extensions, /user/search/{name} and /user/namespace/{name}/members, and \u2014 because /user/csrf was readable the same way \u2014 allowed the CSRF protection on write endpoints to be defeated. Chaining the two, an attacker page could call /user/token/create and exfiltrate a personal access token carrying publish and delete rights over the victim\u0027s namespaces.\u003c/p\u003e\u003cp\u003eThe headers were emitted by the CDN/edge layer, not by the application: the Open VSX software sets allowCredentials(true) in exactly one place, against a single exact origin derived from ovsx.webui.url, and defines no CORS mapping on /user/ beyond it. No configuration of the software produces origin reflection with credentials.\u003c/p\u003e"
}
],
"value": "The open-vsx.org deployment returned Access-Control-Allow-Origin reflecting the requesting origin together with Access-Control-Allow-Credentials: true on the authenticated /user/ endpoints. A page on any origin could therefore issue credentialed requests to the service in a logged-in user\u0027s browser and read the responses.\n\n\n\nThis exposed /user (login name, avatar, homepage, tokens URL), /user/tokens, /user/namespaces, /user/extensions, /user/search/{name} and /user/namespace/{name}/members, and \u2014 because /user/csrf was readable the same way \u2014 allowed the CSRF protection on write endpoints to be defeated. Chaining the two, an attacker page could call /user/token/create and exfiltrate a personal access token carrying publish and delete rights over the victim\u0027s namespaces.\n\n\n\nThe headers were emitted by the CDN/edge layer, not by the application: the Open VSX software sets allowCredentials(true) in exactly one place, against a single exact origin derived from ovsx.webui.url, and defines no CORS mapping on /user/ beyond it. No configuration of the software produces origin reflection with credentials."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "PASSIVE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-942",
"description": "CWE-942",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-22T09:27:34.713Z",
"orgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c",
"shortName": "eclipse"
},
"references": [
{
"url": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/289"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Reflected arbitrary origins with credentials, allowing cross-origin reads of authenticated user data",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c",
"assignerShortName": "eclipse",
"cveId": "CVE-2026-90882",
"datePublished": "2026-09-22T09:27:34.713Z",
"dateReserved": "2026-09-14T07:44:22.377Z",
"dateUpdated": "2026-09-22T13:06:14.742Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
Mitigation
Architecture and Design
Operation
Strategy: Attack Surface Reduction
Define a restrictive Content Security Policy [REF-1486] or cross-domain policy file.
Mitigation
Architecture and Design
Operation
Strategy: Attack Surface Reduction
Avoid using wildcards in the CSP / cross-domain policy file. Any domain matching the wildcard expression will be implicitly trusted, and can perform two-way interaction with the target server.
Mitigation
Architecture and Design
Operation
Strategy: Environment Hardening
For Flash, modify crossdomain.xml to use meta-policy options such as 'master-only' or 'none' to reduce the possibility of an attacker planting extraneous cross-domain policy files on a server.
No CAPEC attack patterns related to this CWE.