Common Weakness Enumeration
CWE-942
AllowedPermissive Cross-domain Security Policy with Untrusted Domains
Abstraction: Variant · Status: Incomplete
The product uses a web-client protection mechanism such as a Content Security Policy (CSP) or cross-domain policy file, but the policy includes untrusted domains with which the web client is allowed to communicate.
238 vulnerabilities reference this CWE, most recent first.
CVE-2026-116748 (GCVE-0-2026-116748)
Vulnerability from cvelistv5 – Published: 2026-10-26 21:52 – Updated: 2026-10-26 21:52
VLAI
EPSS
VEX
Title
Transmission 4.0.0 before 4.1.3 Permissive CORS Leaks RPC Anti-CSRF Token
Summary
Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that exposes the X-Transmission-Session-Id anti-CSRF token to any web origin. Malicious web pages can read the token from the 409 handshake response and replay it to issue RPC calls, enabling script-torrent-done execution, download-dir changes, or torrent and data deletion.
Severity
CWE
- CWE-942 - Permissive Cross-domain Security Policy with Untrusted Domains
Assigner
References
7 references
| URL | Tags |
|---|---|
| https://github.com/transmission/transmission/pull/8938 | issue-trackingpatch |
| https://github.com/transmission/transmission/comm… | patch |
| https://github.com/transmission/transmission | product |
| https://github.com/transmission/transmission/rele… | release-notes |
| https://github.com/transmission/transmission/blob… | technical-description |
| https://joshua.hu/transmission-cors-rpc-csrf-rce-… | third-party-advisory |
| https://www.vulncheck.com/advisories/transmission… | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| transmission | transmission |
Affected:
4.0.0 , < 4.1.3
(semver)
cpe:2.3:a:transmissionbt:transmission:*:*:*:*:*:*:*:* |
Date Public
2026-06-25 00:00
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageURL": "pkg:github/transmission/transmission",
"product": "transmission",
"repo": "https://github.com/transmission/transmission",
"vendor": "transmission",
"versions": [
{
"lessThan": "4.1.3",
"status": "affected",
"version": "4.0.0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:transmissionbt:transmission:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.1.3",
"versionStartIncluding": "4.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Joshua Rogers"
},
{
"lang": "en",
"type": "remediation developer",
"value": "ckerr"
}
],
"datePublic": "2026-06-25T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that exposes the X-Transmission-Session-Id anti-CSRF token to any web origin. Malicious web pages can read the token from the 409 handshake response and replay it to issue RPC calls, enabling script-torrent-done execution, download-dir changes, or torrent and data deletion."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"privilegesRequired": "NONE",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "PASSIVE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-942",
"description": "Permissive Cross-domain Security Policy with Untrusted Domains",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T21:52:45.799Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"name": "Pull Request #8938",
"tags": [
"issue-tracking",
"patch"
],
"url": "https://github.com/transmission/transmission/pull/8938"
},
{
"name": "Patch Commit",
"tags": [
"patch"
],
"url": "https://github.com/transmission/transmission/commit/c6a1bd2017a0fea9c956737c213f23e4b0f7929e"
},
{
"tags": [
"product"
],
"url": "https://github.com/transmission/transmission"
},
{
"name": "transmission 4.1.3 Release Notes",
"tags": [
"release-notes"
],
"url": "https://github.com/transmission/transmission/releases/tag/4.1.3"
},
{
"tags": [
"technical-description"
],
"url": "https://github.com/transmission/transmission/blob/4.1.2/libtransmission/rpc-server.cc#L560"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://joshua.hu/transmission-cors-rpc-csrf-rce-drive-by-exploit"
},
{
"name": "VulnCheck Advisory: Transmission 4.0.0 before 4.1.3 Permissive CORS Leaks RPC Anti-CSRF Token",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/transmission-4.0.0-before-4.1.3-permissive-cors-leaks-rpc-anti-csrf-token"
}
],
"title": "Transmission 4.0.0 before 4.1.3 Permissive CORS Leaks RPC Anti-CSRF Token",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-116748",
"datePublished": "2026-10-26T21:52:45.799Z",
"dateReserved": "2026-10-26T20:23:37.457Z",
"dateUpdated": "2026-10-26T21:52:45.799Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-115917 (GCVE-0-2026-115917)
Vulnerability from cvelistv5 – Published: 2026-10-26 17:20 – Updated: 2026-10-26 17:20
VLAI
EPSS
VEX
Title
vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server
Summary
vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the OpenAI-compatible server configures Starlette CORSMiddleware with allowed_origins set to a wildcard by default. A malicious web page can use a victim's browser to reach an unauthenticated vLLM server on localhost, an internal network, or a VPN, call endpoints including GET /v1/models and POST /v1/chat/completions, consume GPU resources, and read responses. Cookie-based cross-site request forgery does not apply because credentials are disabled by default, and deployments requiring bearer authentication are exposed only when the caller already has a usable token. This issue is fixed in version 0.32.0.
Severity
CWE
- CWE-942 - Permissive Cross-domain Policy with Untrusted Domains
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/vllm-project/vllm/security/adv… | x_refsource_CONFIRM |
| https://github.com/vllm-project/vllm/pull/61009 | x_refsource_MISC |
| https://github.com/vllm-project/vllm/commit/fcae5… | x_refsource_MISC |
| https://github.com/vllm-project/vllm/releases/tag… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| vllm-project | vllm |
Affected:
< 0.32.0
|
{
"containers": {
"cna": {
"affected": [
{
"product": "vllm",
"vendor": "vllm-project",
"versions": [
{
"status": "affected",
"version": "\u003c 0.32.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the OpenAI-compatible server configures Starlette CORSMiddleware with allowed_origins set to a wildcard by default. A malicious web page can use a victim\u0027s browser to reach an unauthenticated vLLM server on localhost, an internal network, or a VPN, call endpoints including GET /v1/models and POST /v1/chat/completions, consume GPU resources, and read responses. Cookie-based cross-site request forgery does not apply because credentials are disabled by default, and deployments requiring bearer authentication are exposed only when the caller already has a usable token. This issue is fixed in version 0.32.0."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.4,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-942",
"description": "CWE-942: Permissive Cross-domain Policy with Untrusted Domains",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T17:20:09.065Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/vllm-project/vllm/security/advisories/GHSA-vvpg-rrww-wpmh",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-vvpg-rrww-wpmh"
},
{
"name": "https://github.com/vllm-project/vllm/pull/61009",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vllm-project/vllm/pull/61009"
},
{
"name": "https://github.com/vllm-project/vllm/commit/fcae5c98870ff2c20659731dce7ba3a3ff0d48aa",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vllm-project/vllm/commit/fcae5c98870ff2c20659731dce7ba3a3ff0d48aa"
},
{
"name": "https://github.com/vllm-project/vllm/releases/tag/v0.32.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/vllm-project/vllm/releases/tag/v0.32.0"
}
],
"source": {
"advisory": "GHSA-vvpg-rrww-wpmh",
"discovery": "UNKNOWN"
},
"title": "vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-115917",
"datePublished": "2026-10-26T17:20:09.065Z",
"dateReserved": "2026-10-23T20:21:45.107Z",
"dateUpdated": "2026-10-26T17:20:09.065Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-111922 (GCVE-0-2026-111922)
Vulnerability from cvelistv5 – Published: 2026-10-17 18:46 – Updated: 2026-10-19 15:00
VLAI
EPSS
VEX
Title
Vikunja 2.2.0 before 2.7.0 Permissive CORS Policy Trusting Localhost Origins
Summary
Vikunja from 2.2.0 before 2.7.0 contains a permissive CORS configuration that trusts every localhost and 127.0.0.1 port with credentials, even when service.publicurl is set. Attackers controlling a page on any localhost port can send a credentialed request to the token refresh endpoint and read the returned bearer JWT to take over the logged-in user's account.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-19 15:00 UTC
CWE
- CWE-942 - Permissive Cross-domain Security Policy with Untrusted Domains
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://github.com/go-vikunja/vikunja/security/ad… | vendor-advisory |
| https://www.vulncheck.com/advisories/vikunja-2.2.… | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| go-vikunja | vikunja |
Affected:
2.2.0 , < 2.7.0
(semver)
Unaffected: 2.7.0 (semver) cpe:2.3:a:vikunja:vikunja:*:*:*:*:*:*:*:* |
Date Public
2026-10-03 00:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-111922",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-19T15:00:08.819201Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T15:00:44.366Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/go-vikunja/vikunja/security/advisories/GHSA-m687-p538-r5hp"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageURL": "pkg:golang/code.vikunja.io/api",
"product": "vikunja",
"vendor": "go-vikunja",
"versions": [
{
"lessThan": "2.7.0",
"status": "affected",
"version": "2.2.0",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "2.7.0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:vikunja:vikunja:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.7.0",
"versionStartIncluding": "2.2.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "arthurscchan"
},
{
"lang": "en",
"type": "reporter",
"value": "AdamKorcz"
}
],
"datePublic": "2026-10-03T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Vikunja from 2.2.0 before 2.7.0 contains a permissive CORS configuration that trusts every localhost and 127.0.0.1 port with credentials, even when service.publicurl is set. Attackers controlling a page on any localhost port can send a credentialed request to the token refresh endpoint and read the returned bearer JWT to take over the logged-in user\u0027s account."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "LOCAL",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "PASSIVE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-942",
"description": "Permissive Cross-domain Security Policy with Untrusted Domains",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-17T18:46:35.991Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"name": "GitHub Security Advisory (GHSA-m687-p538-r5hp)",
"tags": [
"vendor-advisory"
],
"url": "https://github.com/go-vikunja/vikunja/security/advisories/GHSA-m687-p538-r5hp"
},
{
"name": "VulnCheck Advisory: Vikunja 2.2.0 before 2.7.0 Permissive CORS Policy Trusting Localhost Origins",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/vikunja-2.2.0-before-2.7.0-permissive-cors-policy-trusting-localhost-origins"
}
],
"title": "Vikunja 2.2.0 before 2.7.0 Permissive CORS Policy Trusting Localhost Origins",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-111922",
"datePublished": "2026-10-17T18:46:35.991Z",
"dateReserved": "2026-10-17T12:19:42.358Z",
"dateUpdated": "2026-10-19T15:00:44.366Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-110737 (GCVE-0-2026-110737)
Vulnerability from cvelistv5 – Published: 2026-10-27 10:26 – Updated: 2026-10-27 13:03
VLAI
EPSS
VEX
Title
Push Endpoint Returns Permissive CORS Headers
Summary
The push endpoint of a Vaadin application that uses server push reflects the request Origin into the Access-Control-Allow-Origin response header and allows credentials, because Flow configures Atmosphere with DROP_ACCESS_CONTROL_ALLOW_ORIGIN_HEADER set to false and its CorsInterceptor then echoes whatever Origin the request carries. A page on any origin can therefore make a cross origin request to that endpoint with the user's cookies and read the response, although reading anything useful also requires the push identifier of that session. Applications that do not use @Push are not affected, and neither is the WebSocket transport. The behaviour was introduced in January 2015 and is present in every Flow release and in Vaadin Framework from 7.1.0, which is when push was added.
Users of affected versions should apply the following mitigation or upgrade. Releases that have fixed this issue include:
Product version
Vaadin 14.14.0 - 14.14.7
Vaadin 23.6.0 - 23.6.16
Vaadin 24.4.0 - 24.4.25
Vaadin 24.5.0 - 24.5.15
Vaadin 24.6.0 - 24.6.13
Vaadin 24.7.0 - 24.7.16
Vaadin 24.8.0 - 24.8.17
Vaadin 24.9.0 - 24.9.23
Vaadin 24.10.0 - 24.10.11
Vaadin 25.0.0 - 25.0.13
Vaadin 25.1.0 - 25.1.13
Vaadin 25.2.0 - 25.2.10
Vaadin 25.3.0 - 25.3.2
Vaadin Framework 7.1.0 - 7.7.54
Vaadin Framework 8.0.0 - 8.32.1
Mitigation
Upgrade to 14.14.8
Upgrade to 23.6.17
Upgrade to 24.4.26
Upgrade to 24.7.17
Upgrade to 24.7.17
Upgrade to 24.7.17
Upgrade to 24.9.24
Upgrade to 24.9.24
Upgrade to 24.10.12
Upgrade to 25.2.11
Upgrade to 25.2.11
Upgrade to 25.2.11
Upgrade to 25.3.3
Upgrade to 7.7.55
Upgrade to 8.32.2
Please note that Vaadin versions 10-13 and 15-22 are no longer supported and you should update either to the latest 14, 23, 24, 25 version.
Artifacts under com.vaadin
Maven coordinates / Vulnerable versions / Fixed version
vaadin / 14.14.0 - 14.14.7 / >=14.14.8
vaadin / 23.6.0 - 23.6.16 / >=23.6.17
vaadin / 24.4.0 - 24.4.25 / >=24.4.26
vaadin / 24.5.0 - 24.5.15 / >=24.7.17
vaadin / 24.6.0 - 24.6.13 / >=24.7.17
vaadin / 24.7.0 - 24.7.16 / >=24.7.17
vaadin / 24.8.0 - 24.8.17 / >=24.9.24
vaadin / 24.9.0 - 24.9.23 / >=24.9.24
vaadin / 24.10.0 - 24.10.11 / >=24.10.12
vaadin / 25.0.0 - 25.0.13 / >=25.2.11
vaadin / 25.1.0 - 25.1.13 / >=25.2.11
vaadin / 25.2.0 - 25.2.10 / >=25.2.11
vaadin / 25.3.0 - 25.3.2 / >=25.3.3
vaadin-core / 14.14.0 - 14.14.7 / >=14.14.8
vaadin-core / 23.6.0 - 23.6.16 / >=23.6.17
vaadin-core / 24.4.0 - 24.4.25 / >=24.4.26
vaadin-core / 24.5.0 - 24.5.15 / >=24.7.17
vaadin-core / 24.6.0 - 24.6.13 / >=24.7.17
vaadin-core / 24.7.0 - 24.7.16 / >=24.7.17
vaadin-core / 24.8.0 - 24.8.17 / >=24.9.24
vaadin-core / 24.9.0 - 24.9.23 / >=24.9.24
vaadin-core / 24.10.0 - 24.10.11 / >=24.10.12
vaadin-core / 25.0.0 - 25.0.13 / >=25.2.11
vaadin-core / 25.1.0 - 25.1.13 / >=25.2.11
vaadin-core / 25.2.0 - 25.2.10 / >=25.2.11
vaadin-core / 25.3.0 - 25.3.2 / >=25.3.3
flow-server / 2.13.0 - 2.13.7 / >=2.13.8
flow-server / 23.6.0 - 23.6.15 / >=23.6.16
flow-server / 24.4.0 - 24.4.18 / >=24.4.19
flow-server / 24.5.0 - 24.5.17 / >=24.7.17
flow-server / 24.6.0 - 24.6.14 / >=24.7.17
flow-server / 24.7.0 - 24.7.15 / >=24.7.16
flow-server / 24.8.0 - 24.8.16 / >=24.9.24
flow-server / 24.9.0 - 24.9.28 / >=24.9.29
flow-server / 24.10.0 - 24.10.14 / >=24.10.15
flow-server / 25.0.0 - 25.0.15 / >=25.2.11
flow-server / 25.1.0 - 25.1.18 / >=25.1.19
flow-server / 25.2.0 - 25.2.12 / >=25.2.13
flow-server / 25.3.0 - 25.3.3 / >=25.3.4
vaadin-server / 7.1.0 - 7.7.54 / >=7.7.55
vaadin-server / 8.0.0 - 8.32.1 / >=8.32.2
vaadin-server-mpr-jakarta / 7.7.36 - 7.7.54 / >=7.7.55
vaadin-server-mpr-jakarta / 8.18.0 - 8.32.1 / >=8.32.2
Severity
CWE
Assigner
References
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| vaadin | vaadin |
Affected:
14.14.0 , < 14.14.8
(maven)
Affected: 23.6.0 , < 23.6.17 (maven) Affected: 24.4.0 , < 24.4.26 (maven) Affected: 24.5.0 , ≤ 24.5.15 (maven) Affected: 24.6.0 , ≤ 24.6.13 (maven) Affected: 24.7.0 , < 24.7.17 (maven) Affected: 24.8.0 , ≤ 24.8.17 (maven) Affected: 24.9.0 , < 24.9.24 (maven) Affected: 24.10.0 , < 24.10.12 (maven) Affected: 25.0.0 , ≤ 25.0.13 (maven) Affected: 25.1.0 , ≤ 25.1.13 (maven) Affected: 25.2.0 , < 25.2.11 (maven) Affected: 25.3.0 , < 25.3.3 (maven) |
|
| vaadin | flow |
Affected:
2.13.0 , < 2.13.8
(maven)
Affected: 23.6.0 , < 23.6.16 (maven) Affected: 24.4.0 , < 24.4.19 (maven) Affected: 24.5.0 , ≤ 24.5.17 (maven) Affected: 24.6.0 , ≤ 24.6.14 (maven) Affected: 24.7.0 , < 24.7.16 (maven) Affected: 24.8.0 , ≤ 24.8.16 (maven) Affected: 24.9.0 , < 24.9.29 (maven) Affected: 24.10.0 , < 24.10.15 (maven) Affected: 25.0.0 , ≤ 25.0.15 (maven) Affected: 25.1.0 , < 25.1.19 (maven) Affected: 25.2.0 , < 25.2.13 (maven) Affected: 25.3.0 , < 25.3.4 (maven) |
|
| vaadin | framework |
Affected:
7.1.0 , < 7.7.55
(maven)
Affected: 8.0.0 , < 8.32.2 (maven) |
|
| vaadin | framework |
Affected:
7.7.36 , < 7.7.55
(maven)
Affected: 8.18.0 , < 8.32.2 (maven) |
{
"containers": {
"cna": {
"affected": [
{
"collectionURL": "https://repo.maven.apache.org/maven2",
"defaultStatus": "unaffected",
"packageName": "com.vaadin:vaadin",
"product": "vaadin",
"repo": "https://github.com/vaadin/platform",
"vendor": "vaadin",
"versions": [
{
"lessThan": "14.14.8",
"status": "affected",
"version": "14.14.0",
"versionType": "maven"
},
{
"lessThan": "23.6.17",
"status": "affected",
"version": "23.6.0",
"versionType": "maven"
},
{
"lessThan": "24.4.26",
"status": "affected",
"version": "24.4.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "24.5.15",
"status": "affected",
"version": "24.5.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "24.6.13",
"status": "affected",
"version": "24.6.0",
"versionType": "maven"
},
{
"lessThan": "24.7.17",
"status": "affected",
"version": "24.7.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "24.8.17",
"status": "affected",
"version": "24.8.0",
"versionType": "maven"
},
{
"lessThan": "24.9.24",
"status": "affected",
"version": "24.9.0",
"versionType": "maven"
},
{
"lessThan": "24.10.12",
"status": "affected",
"version": "24.10.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "25.0.13",
"status": "affected",
"version": "25.0.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "25.1.13",
"status": "affected",
"version": "25.1.0",
"versionType": "maven"
},
{
"lessThan": "25.2.11",
"status": "affected",
"version": "25.2.0",
"versionType": "maven"
},
{
"lessThan": "25.3.3",
"status": "affected",
"version": "25.3.0",
"versionType": "maven"
}
]
},
{
"collectionURL": "https://repo.maven.apache.org/maven2",
"defaultStatus": "unaffected",
"packageName": "com.vaadin:vaadin-core",
"product": "vaadin",
"repo": "https://github.com/vaadin/platform",
"vendor": "vaadin",
"versions": [
{
"lessThan": "14.14.8",
"status": "affected",
"version": "14.14.0",
"versionType": "maven"
},
{
"lessThan": "23.6.17",
"status": "affected",
"version": "23.6.0",
"versionType": "maven"
},
{
"lessThan": "24.4.26",
"status": "affected",
"version": "24.4.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "24.5.15",
"status": "affected",
"version": "24.5.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "24.6.13",
"status": "affected",
"version": "24.6.0",
"versionType": "maven"
},
{
"lessThan": "24.7.17",
"status": "affected",
"version": "24.7.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "24.8.17",
"status": "affected",
"version": "24.8.0",
"versionType": "maven"
},
{
"lessThan": "24.9.24",
"status": "affected",
"version": "24.9.0",
"versionType": "maven"
},
{
"lessThan": "24.10.12",
"status": "affected",
"version": "24.10.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "25.0.13",
"status": "affected",
"version": "25.0.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "25.1.13",
"status": "affected",
"version": "25.1.0",
"versionType": "maven"
},
{
"lessThan": "25.2.11",
"status": "affected",
"version": "25.2.0",
"versionType": "maven"
},
{
"lessThan": "25.3.3",
"status": "affected",
"version": "25.3.0",
"versionType": "maven"
}
]
},
{
"collectionURL": "https://repo.maven.apache.org/maven2",
"defaultStatus": "unaffected",
"packageName": "com.vaadin:flow-server",
"product": "flow",
"repo": "https://github.com/vaadin/flow",
"vendor": "vaadin",
"versions": [
{
"lessThan": "2.13.8",
"status": "affected",
"version": "2.13.0",
"versionType": "maven"
},
{
"lessThan": "23.6.16",
"status": "affected",
"version": "23.6.0",
"versionType": "maven"
},
{
"lessThan": "24.4.19",
"status": "affected",
"version": "24.4.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "24.5.17",
"status": "affected",
"version": "24.5.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "24.6.14",
"status": "affected",
"version": "24.6.0",
"versionType": "maven"
},
{
"lessThan": "24.7.16",
"status": "affected",
"version": "24.7.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "24.8.16",
"status": "affected",
"version": "24.8.0",
"versionType": "maven"
},
{
"lessThan": "24.9.29",
"status": "affected",
"version": "24.9.0",
"versionType": "maven"
},
{
"lessThan": "24.10.15",
"status": "affected",
"version": "24.10.0",
"versionType": "maven"
},
{
"lessThanOrEqual": "25.0.15",
"status": "affected",
"version": "25.0.0",
"versionType": "maven"
},
{
"lessThan": "25.1.19",
"status": "affected",
"version": "25.1.0",
"versionType": "maven"
},
{
"lessThan": "25.2.13",
"status": "affected",
"version": "25.2.0",
"versionType": "maven"
},
{
"lessThan": "25.3.4",
"status": "affected",
"version": "25.3.0",
"versionType": "maven"
}
]
},
{
"collectionURL": "https://repo.maven.apache.org/maven2",
"defaultStatus": "unaffected",
"packageName": "com.vaadin:vaadin-server",
"product": "framework",
"repo": "https://github.com/vaadin/framework",
"vendor": "vaadin",
"versions": [
{
"lessThan": "7.7.55",
"status": "affected",
"version": "7.1.0",
"versionType": "maven"
},
{
"lessThan": "8.32.2",
"status": "affected",
"version": "8.0.0",
"versionType": "maven"
}
]
},
{
"collectionURL": "https://repo.maven.apache.org/maven2",
"defaultStatus": "unaffected",
"packageName": "com.vaadin:vaadin-server-mpr-jakarta",
"product": "framework",
"repo": "https://github.com/vaadin/framework",
"vendor": "vaadin",
"versions": [
{
"lessThan": "7.7.55",
"status": "affected",
"version": "7.7.36",
"versionType": "maven"
},
{
"lessThan": "8.32.2",
"status": "affected",
"version": "8.18.0",
"versionType": "maven"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgba(232, 232, 232, 0.04);\"\u003eThe push endpoint of a Vaadin application that uses server push reflects the request Origin into the Access-Control-Allow-Origin response header and allows credentials, because Flow configures Atmosphere with DROP_ACCESS_CONTROL_ALLOW_ORIGIN_HEADER set to false and its CorsInterceptor then echoes whatever Origin the request carries. A page on any origin can therefore make a cross origin request to that endpoint with the user\u0027s cookies and read the response, although reading anything useful also requires the push identifier of that session. Applications that do not use @Push are not affected, and neither is the WebSocket transport. The behaviour was introduced in January 2015 and is present in every Flow release and in Vaadin Framework from 7.1.0, which is when push was added.\u003cbr\u003e\u003cbr\u003e\u003cbr\u003eUsers of affected versions should apply the following mitigation or upgrade. Releases that have fixed this issue include:\u003cbr\u003e\u003cbr\u003eProduct version\u003cbr\u003eVaadin 14.14.0 - 14.14.7\u003cbr\u003eVaadin 23.6.0 - 23.6.16\u003cbr\u003eVaadin 24.4.0 - 24.4.25\u003cbr\u003eVaadin 24.5.0 - 24.5.15\u003cbr\u003eVaadin 24.6.0 - 24.6.13\u003cbr\u003eVaadin 24.7.0 - 24.7.16\u003cbr\u003eVaadin 24.8.0 - 24.8.17\u003cbr\u003eVaadin 24.9.0 - 24.9.23\u003cbr\u003eVaadin 24.10.0 - 24.10.11\u003cbr\u003eVaadin 25.0.0 - 25.0.13\u003cbr\u003eVaadin 25.1.0 - 25.1.13\u003cbr\u003eVaadin 25.2.0 - 25.2.10\u003cbr\u003eVaadin 25.3.0 - 25.3.2\u003cbr\u003eVaadin Framework 7.1.0 - 7.7.54\u003cbr\u003eVaadin Framework 8.0.0 - 8.32.1\u003cbr\u003e\u003cbr\u003eMitigation\u003cbr\u003eUpgrade to 14.14.8\u003cbr\u003eUpgrade to 23.6.17\u003cbr\u003eUpgrade to 24.4.26\u003cbr\u003eUpgrade to 24.7.17\u003cbr\u003eUpgrade to 24.7.17\u003cbr\u003eUpgrade to 24.7.17\u003cbr\u003eUpgrade to 24.9.24\u003cbr\u003eUpgrade to 24.9.24\u003cbr\u003eUpgrade to 24.10.12\u003cbr\u003eUpgrade to 25.2.11\u003cbr\u003eUpgrade to 25.2.11\u003cbr\u003eUpgrade to 25.2.11\u003cbr\u003eUpgrade to 25.3.3\u003cbr\u003eUpgrade to 7.7.55\u003cbr\u003eUpgrade to 8.32.2\u003cbr\u003e\u003cbr\u003ePlease note that Vaadin versions 10-13 and 15-22 are no longer supported and you should update either to the latest 14, 23, 24, 25 version.\u003cbr\u003e\u003cbr\u003eArtifacts\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eMaven coordinates\u003c/td\u003e\u003ctd\u003eVulnerable versions\u003c/td\u003e\u003ctd\u003eFixed version\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e14.14.0 - 14.14.7\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;14.14.8\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e23.6.0 - 23.6.16\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;23.6.17\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.4.0 - 24.4.25\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.4.26\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.5.0 - 24.5.15\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.7.17\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.6.0 - 24.6.13\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.7.17\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.7.0 - 24.7.16\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.7.17\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.8.0 - 24.8.17\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.9.24\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.9.0 - 24.9.23\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.9.24\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.10.0 - 24.10.11\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.10.12\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e25.0.0 - 25.0.13\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;25.2.11\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e25.1.0 - 25.1.13\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;25.2.11\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e25.2.0 - 25.2.10\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;25.2.11\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e25.3.0 - 25.3.2\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;25.3.3\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-core\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e14.14.0 - 14.14.7\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;14.14.8\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-core\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e23.6.0 - 23.6.16\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;23.6.17\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-core\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.4.0 - 24.4.25\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.4.26\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-core\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.5.0 - 24.5.15\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.7.17\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-core\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.6.0 - 24.6.13\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.7.17\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-core\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.7.0 - 24.7.16\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.7.17\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-core\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.8.0 - 24.8.17\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.9.24\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-core\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.9.0 - 24.9.23\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.9.24\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-core\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.10.0 - 24.10.11\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.10.12\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-core\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e25.0.0 - 25.0.13\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;25.2.11\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-core\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e25.1.0 - 25.1.13\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;25.2.11\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-core\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e25.2.0 - 25.2.10\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;25.2.11\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-core\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e25.3.0 - 25.3.2\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;25.3.3\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:flow-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e2.13.0 - 2.13.7\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;2.13.8\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:flow-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e23.6.0 - 23.6.15\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;23.6.16\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:flow-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.4.0 - 24.4.18\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.4.19\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:flow-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.5.0 - 24.5.17\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.7.17\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:flow-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.6.0 - 24.6.14\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.7.17\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:flow-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.7.0 - 24.7.15\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.7.16\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:flow-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.8.0 - 24.8.16\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.9.24\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:flow-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.9.0 - 24.9.28\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.9.29\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:flow-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e24.10.0 - 24.10.14\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;24.10.15\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:flow-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e25.0.0 - 25.0.15\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;25.2.11\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:flow-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e25.1.0 - 25.1.18\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;25.1.19\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:flow-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e25.2.0 - 25.2.12\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;25.2.13\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:flow-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e25.3.0 - 25.3.3\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;25.3.4\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e7.1.0 - 7.7.54\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;7.7.55\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-server\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e8.0.0 - 8.32.1\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;8.32.2\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-server-mpr-jakarta\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e7.7.36 - 7.7.54\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;7.7.55\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ecom.vaadin:vaadin-server-mpr-jakarta\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e8.18.0 - 8.32.1\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u0026ge;8.32.2\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/span\u003e"
}
],
"value": "The push endpoint of a Vaadin application that uses server push reflects the request Origin into the Access-Control-Allow-Origin response header and allows credentials, because Flow configures Atmosphere with DROP_ACCESS_CONTROL_ALLOW_ORIGIN_HEADER set to false and its CorsInterceptor then echoes whatever Origin the request carries. A page on any origin can therefore make a cross origin request to that endpoint with the user\u0027s cookies and read the response, although reading anything useful also requires the push identifier of that session. Applications that do not use @Push are not affected, and neither is the WebSocket transport. The behaviour was introduced in January 2015 and is present in every Flow release and in Vaadin Framework from 7.1.0, which is when push was added.\n\n\nUsers of affected versions should apply the following mitigation or upgrade. Releases that have fixed this issue include:\n\nProduct version\nVaadin 14.14.0 - 14.14.7\nVaadin 23.6.0 - 23.6.16\nVaadin 24.4.0 - 24.4.25\nVaadin 24.5.0 - 24.5.15\nVaadin 24.6.0 - 24.6.13\nVaadin 24.7.0 - 24.7.16\nVaadin 24.8.0 - 24.8.17\nVaadin 24.9.0 - 24.9.23\nVaadin 24.10.0 - 24.10.11\nVaadin 25.0.0 - 25.0.13\nVaadin 25.1.0 - 25.1.13\nVaadin 25.2.0 - 25.2.10\nVaadin 25.3.0 - 25.3.2\nVaadin Framework 7.1.0 - 7.7.54\nVaadin Framework 8.0.0 - 8.32.1\n\nMitigation\nUpgrade to 14.14.8\nUpgrade to 23.6.17\nUpgrade to 24.4.26\nUpgrade to 24.7.17\nUpgrade to 24.7.17\nUpgrade to 24.7.17\nUpgrade to 24.9.24\nUpgrade to 24.9.24\nUpgrade to 24.10.12\nUpgrade to 25.2.11\nUpgrade to 25.2.11\nUpgrade to 25.2.11\nUpgrade to 25.3.3\nUpgrade to 7.7.55\nUpgrade to 8.32.2\n\nPlease note that Vaadin versions 10-13 and 15-22 are no longer supported and you should update either to the latest 14, 23, 24, 25 version.\n\nArtifacts under com.vaadin\nMaven coordinates / Vulnerable versions / Fixed version\nvaadin / 14.14.0 - 14.14.7 / \u003e=14.14.8\nvaadin / 23.6.0 - 23.6.16 / \u003e=23.6.17\nvaadin / 24.4.0 - 24.4.25 / \u003e=24.4.26\nvaadin / 24.5.0 - 24.5.15 / \u003e=24.7.17\nvaadin / 24.6.0 - 24.6.13 / \u003e=24.7.17\nvaadin / 24.7.0 - 24.7.16 / \u003e=24.7.17\nvaadin / 24.8.0 - 24.8.17 / \u003e=24.9.24\nvaadin / 24.9.0 - 24.9.23 / \u003e=24.9.24\nvaadin / 24.10.0 - 24.10.11 / \u003e=24.10.12\nvaadin / 25.0.0 - 25.0.13 / \u003e=25.2.11\nvaadin / 25.1.0 - 25.1.13 / \u003e=25.2.11\nvaadin / 25.2.0 - 25.2.10 / \u003e=25.2.11\nvaadin / 25.3.0 - 25.3.2 / \u003e=25.3.3\nvaadin-core / 14.14.0 - 14.14.7 / \u003e=14.14.8\nvaadin-core / 23.6.0 - 23.6.16 / \u003e=23.6.17\nvaadin-core / 24.4.0 - 24.4.25 / \u003e=24.4.26\nvaadin-core / 24.5.0 - 24.5.15 / \u003e=24.7.17\nvaadin-core / 24.6.0 - 24.6.13 / \u003e=24.7.17\nvaadin-core / 24.7.0 - 24.7.16 / \u003e=24.7.17\nvaadin-core / 24.8.0 - 24.8.17 / \u003e=24.9.24\nvaadin-core / 24.9.0 - 24.9.23 / \u003e=24.9.24\nvaadin-core / 24.10.0 - 24.10.11 / \u003e=24.10.12\nvaadin-core / 25.0.0 - 25.0.13 / \u003e=25.2.11\nvaadin-core / 25.1.0 - 25.1.13 / \u003e=25.2.11\nvaadin-core / 25.2.0 - 25.2.10 / \u003e=25.2.11\nvaadin-core / 25.3.0 - 25.3.2 / \u003e=25.3.3\nflow-server / 2.13.0 - 2.13.7 / \u003e=2.13.8\nflow-server / 23.6.0 - 23.6.15 / \u003e=23.6.16\nflow-server / 24.4.0 - 24.4.18 / \u003e=24.4.19\nflow-server / 24.5.0 - 24.5.17 / \u003e=24.7.17\nflow-server / 24.6.0 - 24.6.14 / \u003e=24.7.17\nflow-server / 24.7.0 - 24.7.15 / \u003e=24.7.16\nflow-server / 24.8.0 - 24.8.16 / \u003e=24.9.24\nflow-server / 24.9.0 - 24.9.28 / \u003e=24.9.29\nflow-server / 24.10.0 - 24.10.14 / \u003e=24.10.15\nflow-server / 25.0.0 - 25.0.15 / \u003e=25.2.11\nflow-server / 25.1.0 - 25.1.18 / \u003e=25.1.19\nflow-server / 25.2.0 - 25.2.12 / \u003e=25.2.13\nflow-server / 25.3.0 - 25.3.3 / \u003e=25.3.4\nvaadin-server / 7.1.0 - 7.7.54 / \u003e=7.7.55\nvaadin-server / 8.0.0 - 8.32.1 / \u003e=8.32.2\nvaadin-server-mpr-jakarta / 7.7.36 - 7.7.54 / \u003e=7.7.55\nvaadin-server-mpr-jakarta / 8.18.0 - 8.32.1 / \u003e=8.32.2"
}
],
"impacts": [
{
"capecId": "CAPEC-468",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-468 Generic Cross-Browser Cross-Domain Theft"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NO",
"Recovery": "AUTOMATIC",
"Safety": "NEGLIGIBLE",
"attackComplexity": "HIGH",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 2.3,
"baseSeverity": "LOW",
"privilegesRequired": "NONE",
"providerUrgency": "CLEAR",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "PASSIVE",
"valueDensity": "DIFFUSE",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "LOW"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-942",
"description": "CWE-942 Permissive Cross-domain Policy with Untrusted Domains",
"lang": "en",
"type": "CWE"
},
{
"cweId": "CWE-346",
"description": "CWE-346 Origin Validation Error",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T13:03:37.752Z",
"orgId": "9e0f3122-90e9-42d5-93de-8c6b98deef7e",
"shortName": "Vaadin"
},
"references": [
{
"url": "https://vaadin.com/security/cve-2026-110737"
},
{
"url": "https://github.com/vaadin/flow/issues/26214"
},
{
"url": "https://github.com/vaadin/flow/pull/26215"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cb\u003e\u003cspan style=\"background-color: transparent;\"\u003eUsers of affected versions should apply the following mitigation or upgrade.\u003c/span\u003e\u003c/b\u003e\u003cbr\u003e"
}
],
"value": "Users of affected versions should apply the following mitigation or upgrade."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Push Endpoint Returns Permissive CORS Headers",
"workarounds": [
{
"lang": "en",
"value": "Set the servlet init parameter org.atmosphere.cpr.dropAccessControlAllowOriginHeader to true on the Vaadin servlet, which stops the header being emitted without upgrading. In a Spring Boot application the Vaadin servlet has to be registered explicitly for the parameter to be applied."
}
],
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "9e0f3122-90e9-42d5-93de-8c6b98deef7e",
"assignerShortName": "Vaadin",
"cveId": "CVE-2026-110737",
"datePublished": "2026-10-27T10:26:37.752Z",
"dateReserved": "2026-10-14T16:07:47.846Z",
"dateUpdated": "2026-10-27T13:03:37.752Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-108372 (GCVE-0-2026-108372)
Vulnerability from cvelistv5 – Published: 2026-10-16 21:29 – Updated: 2026-10-21 21:31
VLAI
EPSS
VEX
Title
LoopX serve-status permissive CORS policy exposes control-plane state and private Markdown files
Summary
Open and provider-neutral, LoopX is a lightweight state kernel and local-first control plane for loop engineering. From version 0.0.1 until 0.4.5, `loopx serve-status` in `loopx/status_server.py` uses `StatusRequestHandler._send_json()` and `do_OPTIONS()` to send `Access-Control-Allow-Origin: *` for unauthenticated responses on predictable loopback ports. A remote attacker can cause an operator who visits attacker-controlled web content to issue cross-origin requests to `GET /status.json`, `GET /review-material?goal_id=...&path=...`, `GET /`, and `POST /control-plane/configure-goal/dry-run`, exposing control-plane state, goal and run information, local absolute paths, private Markdown files below registered goal roots, and dry-run configuration projections. The affected routes do not provide cross-origin writes or arbitrary-file access. This issue is fixed in version 0.4.5.
Severity
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-21 21:31 UTC
CWE
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/loopx-project/loopx/security/a… | x_refsource_CONFIRM |
| https://github.com/loopx-project/loopx/pull/3137 | x_refsource_MISC |
| https://github.com/loopx-project/loopx/commit/838… | x_refsource_MISC |
| https://github.com/loopx-project/loopx/releases/t… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| huangruiteng | loopx |
Affected:
>= 0.0.1, < 0.4.5
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-108372",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-21T21:31:14.085436Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-21T21:31:36.971Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/loopx-project/loopx/security/advisories/GHSA-vx2m-gpq4-8j5q"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "loopx",
"vendor": "huangruiteng",
"versions": [
{
"status": "affected",
"version": "\u003e= 0.0.1, \u003c 0.4.5"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Open and provider-neutral, LoopX is a lightweight state kernel and local-first control plane for loop engineering. From version 0.0.1 until 0.4.5, `loopx serve-status` in `loopx/status_server.py` uses `StatusRequestHandler._send_json()` and `do_OPTIONS()` to send `Access-Control-Allow-Origin: *` for unauthenticated responses on predictable loopback ports. A remote attacker can cause an operator who visits attacker-controlled web content to issue cross-origin requests to `GET /status.json`, `GET /review-material?goal_id=...\u0026path=...`, `GET /`, and `POST /control-plane/configure-goal/dry-run`, exposing control-plane state, goal and run information, local absolute paths, private Markdown files below registered goal roots, and dry-run configuration projections. The affected routes do not provide cross-origin writes or arbitrary-file access. This issue is fixed in version 0.4.5."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"privilegesRequired": "NONE",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "PASSIVE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-346",
"description": "CWE-346: Origin Validation Error",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-942",
"description": "CWE-942: Permissive Cross-domain Policy with Untrusted Domains",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-16T21:29:13.757Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/loopx-project/loopx/security/advisories/GHSA-vx2m-gpq4-8j5q",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/loopx-project/loopx/security/advisories/GHSA-vx2m-gpq4-8j5q"
},
{
"name": "https://github.com/loopx-project/loopx/pull/3137",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/loopx-project/loopx/pull/3137"
},
{
"name": "https://github.com/loopx-project/loopx/commit/838720fba42bd22f71b5bb763ec406f7bdf4c940",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/loopx-project/loopx/commit/838720fba42bd22f71b5bb763ec406f7bdf4c940"
},
{
"name": "https://github.com/loopx-project/loopx/releases/tag/v0.4.5",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/loopx-project/loopx/releases/tag/v0.4.5"
}
],
"source": {
"advisory": "GHSA-vx2m-gpq4-8j5q",
"discovery": "UNKNOWN"
},
"title": "LoopX serve-status permissive CORS policy exposes control-plane state and private Markdown files"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-108372",
"datePublished": "2026-10-16T21:29:13.757Z",
"dateReserved": "2026-10-09T21:36:27.042Z",
"dateUpdated": "2026-10-21T21:31:36.971Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-107858 (GCVE-0-2026-107858)
Vulnerability from cvelistv5 – Published: 2026-10-23 05:08 – Updated: 2026-10-23 05:08
VLAI
EPSS
VEX
Title
Cross-Site WebSocket Hijacking and Permissive CORS in Google Agent Development Kit (ADK) for Java Development Server
Summary
Missing Origin Validation in WebSockets (CWE-1385) and Permissive Cross-domain Policy with Untrusted Domains (CWE-942) in the development web server (ADK Web) in Google Agent Development Kit (ADK) for Java (com.google.adk:google-adk-dev versions 0.1.0 before 1.13.0 and com.google.adk:google-adk-maven-plugin versions 0.3.0 before 1.13.0) allow a remote attacker to control a locally running agent and read its data via a malicious web page visited by a developer while the server is running. The /run_live WebSocket endpoint accepts connections from any origin by default (hardcoded via setAllowedOrigins("*") in versions 0.1.0 through 1.5.0, and defaulting to * via adk.web.cors.origins in versions 1.6.0 through 1.12.0), and since version 0.4.0 the REST API returns Access-Control-Allow-Origin: * by default. Because the server has no authentication and requests originate from the developer's browser (so binding to localhost does not prevent exploitation), a cross-origin page can send messages to the agent (triggering registered tools), stream agent responses, and list, read, create, or delete sessions and artifacts. In versions 1.6.0 through 1.12.0, users can mitigate the issue by setting the adk.web.cors.origins property to an explicit allowlist of trusted origins (such as http://localhost:8000). The vulnerability is fixed in version 1.13.0, which enforces a same-origin default for CORS and the /run_live WebSocket endpoint, and rejects DNS-rebinding requests over loopback.
Severity
CWE
Assigner
References
7 references
| URL | Tags |
|---|---|
| https://github.com/google/adk-java/issues/1257 | issue-trackingexploit |
| https://github.com/google/adk-java/releases/tag/v1.13.0 | release-notes |
| https://github.com/google/adk-java/commit/5667d38… | patch |
| https://github.com/google/adk-java/commit/1ae5078… | patch |
| https://github.com/google/adk-java/pull/1222 | mitigationpatch |
| https://github.com/google/adk-java/commit/c2b087c… | mitigationpatch |
| https://github.com/google/adk-java/releases/tag/v1.6.0 | release-notes |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Agent Development Kit (ADK) for Java |
Affected:
0.1.0 , < 1.13.0
(semver)
|
||
| Agent Development Kit (ADK) for Java |
Affected:
0.3.0 , < 1.13.0
(semver)
|
Date Public
2026-06-11 10:31
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageName": "com.google.adk:google-adk-dev",
"product": "Agent Development Kit (ADK) for Java",
"repo": "https://github.com/google/adk-java",
"vendor": "Google",
"versions": [
{
"lessThan": "1.13.0",
"status": "affected",
"version": "0.1.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"packageName": "com.google.adk:google-adk-maven-plugin",
"product": "Agent Development Kit (ADK) for Java",
"repo": "https://github.com/google/adk-java",
"vendor": "Google",
"versions": [
{
"lessThan": "1.13.0",
"status": "affected",
"version": "0.3.0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "George Chen (@geo-chen)"
},
{
"lang": "en",
"type": "finder",
"value": "Gouri Sankar A (@g0w6y)"
}
],
"datePublic": "2026-06-11T10:31:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eMissing Origin Validation in WebSockets (CWE-1385) and Permissive Cross-domain Policy with Untrusted Domains (CWE-942) in the development web server (ADK Web) in Google Agent Development Kit (ADK) for Java (\u003ccode\u003ecom.google.adk:google-adk-dev\u003c/code\u003e versions 0.1.0 before 1.13.0 and \u003ccode\u003ecom.google.adk:google-adk-maven-plugin\u003c/code\u003e versions 0.3.0 before 1.13.0) allow a remote attacker to control a locally running agent and read its data via a malicious web page visited by a developer while the server is running. The \u003ccode\u003e/run_live\u003c/code\u003e WebSocket endpoint accepts connections from any origin by default (hardcoded via \u003ccode\u003esetAllowedOrigins(\"*\")\u003c/code\u003e in versions 0.1.0 through 1.5.0, and defaulting to \u003ccode\u003e*\u003c/code\u003e via \u003ccode\u003eadk.web.cors.origins\u003c/code\u003e in versions 1.6.0 through 1.12.0), and since version 0.4.0 the REST API returns \u003ccode\u003eAccess-Control-Allow-Origin: *\u003c/code\u003e by default. Because the server has no authentication and requests originate from the developer\u0027s browser (so binding to localhost does not prevent exploitation), a cross-origin page can send messages to the agent (triggering registered tools), stream agent responses, and list, read, create, or delete sessions and artifacts. In versions 1.6.0 through 1.12.0, users can mitigate the issue by setting the \u003ccode\u003eadk.web.cors.origins\u003c/code\u003e property to an explicit allowlist of trusted origins (such as \u003ccode\u003ehttp://localhost:8000\u003c/code\u003e). The vulnerability is fixed in version 1.13.0, which enforces a same-origin default for CORS and the \u003ccode\u003e/run_live\u003c/code\u003e WebSocket endpoint, and rejects DNS-rebinding requests over loopback.\u003c/p\u003e"
}
],
"value": "Missing Origin Validation in WebSockets (CWE-1385) and Permissive Cross-domain Policy with Untrusted Domains (CWE-942) in the development web server (ADK Web) in Google Agent Development Kit (ADK) for Java (com.google.adk:google-adk-dev versions 0.1.0 before 1.13.0 and com.google.adk:google-adk-maven-plugin versions 0.3.0 before 1.13.0) allow a remote attacker to control a locally running agent and read its data via a malicious web page visited by a developer while the server is running. The /run_live WebSocket endpoint accepts connections from any origin by default (hardcoded via setAllowedOrigins(\"*\") in versions 0.1.0 through 1.5.0, and defaulting to * via adk.web.cors.origins in versions 1.6.0 through 1.12.0), and since version 0.4.0 the REST API returns Access-Control-Allow-Origin: * by default. Because the server has no authentication and requests originate from the developer\u0027s browser (so binding to localhost does not prevent exploitation), a cross-origin page can send messages to the agent (triggering registered tools), stream agent responses, and list, read, create, or delete sessions and artifacts. In versions 1.6.0 through 1.12.0, users can mitigate the issue by setting the adk.web.cors.origins property to an explicit allowlist of trusted origins (such as http://localhost:8000). The vulnerability is fixed in version 1.13.0, which enforces a same-origin default for CORS and the /run_live WebSocket endpoint, and rejects DNS-rebinding requests over loopback."
}
],
"impacts": [
{
"capecId": "CAPEC-62",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-62 Cross Site Request Forgery"
}
]
},
{
"capecId": "CAPEC-115",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-115 Authentication Bypass"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "PASSIVE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1385",
"description": "CWE-1385 Missing Origin Validation in WebSockets",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-942",
"description": "CWE-942 Permissive Cross-domain Policy with Untrusted Domains",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306 Missing Authentication for Critical Function",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-23T05:08:46.087Z",
"orgId": "14ed7db2-1595-443d-9d34-6215bf890778",
"shortName": "Google"
},
"references": [
{
"tags": [
"issue-tracking",
"exploit"
],
"url": "https://github.com/google/adk-java/issues/1257"
},
{
"tags": [
"release-notes"
],
"url": "https://github.com/google/adk-java/releases/tag/v1.13.0"
},
{
"tags": [
"patch"
],
"url": "https://github.com/google/adk-java/commit/5667d382ab5078a0d6e8f7184713a6bab767e004"
},
{
"tags": [
"patch"
],
"url": "https://github.com/google/adk-java/commit/1ae5078072e13e101318e32833f1db323ef084e1"
},
{
"tags": [
"mitigation",
"patch"
],
"url": "https://github.com/google/adk-java/pull/1222"
},
{
"tags": [
"mitigation",
"patch"
],
"url": "https://github.com/google/adk-java/commit/c2b087cbaf44f44d20dc946d8f2391506a2fce3d"
},
{
"tags": [
"release-notes"
],
"url": "https://github.com/google/adk-java/releases/tag/v1.6.0"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eUpgrade Google Agent Development Kit (ADK) for Java to version 1.13.0 or later.\u003c/p\u003e"
}
],
"value": "Upgrade Google Agent Development Kit (ADK) for Java to version 1.13.0 or later."
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Cross-Site WebSocket Hijacking and Permissive CORS in Google Agent Development Kit (ADK) for Java Development Server",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eFor versions 1.6.0 through 1.12.0, configure the \u003ccode\u003eadk.web.cors.origins\u003c/code\u003e property to an explicit allowlist of trusted origins (for example, \u003ccode\u003ehttp://localhost:8000\u003c/code\u003e) to restrict both the REST API and the \u003ccode\u003e/run_live\u003c/code\u003e WebSocket endpoint.\u003c/p\u003e"
}
],
"value": "For versions 1.6.0 through 1.12.0, configure the adk.web.cors.origins property to an explicit allowlist of trusted origins (for example, http://localhost:8000) to restrict both the REST API and the /run_live WebSocket endpoint."
}
],
"x_generator": {
"engine": "Vulnogram 1.0.2"
}
}
},
"cveMetadata": {
"assignerOrgId": "14ed7db2-1595-443d-9d34-6215bf890778",
"assignerShortName": "Google",
"cveId": "CVE-2026-107858",
"datePublished": "2026-10-23T05:08:46.087Z",
"dateReserved": "2026-10-08T22:58:19.162Z",
"dateUpdated": "2026-10-23T05:08:46.087Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-92359 (GCVE-0-2026-92359)
Vulnerability from cvelistv5 – Published: 2026-09-16 12:00 – Updated: 2026-09-16 13:15 X_Open Source
VLAI
EPSS
VEX
Title
ag-ui-protocol ag-ui CORSMiddleware utils.py create_strands_app cross-domain policy
Summary
A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. The affected element is the function create_strands_app of the file integrations/aws-strands/python/src/ag_ui_strands/utils.py of the component CORSMiddleware. The manipulation results in permissive cross-domain policy with untrusted domains. The attack may be launched remotely. The attack requires a high level of complexity. The exploitability is described as difficult. Upgrading to version AGUI.Abstractions@0.0.6 is sufficient to fix this issue. The patch is identified as 9b143b9668fa52c2054ede9d34a45ac4b4401089. It is suggested to upgrade the affected component.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-16 13:15 UTC
CWE
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/405445 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/405445/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-92359 | third-party-advisory |
| https://vuldb.com/submit/934120 | third-party-advisory |
| https://github.com/ag-ui-protocol/ag-ui/issues/2433 | issue-tracking |
| https://github.com/ag-ui-protocol/ag-ui/pull/2492 | issue-trackingpatch |
| https://github.com/ag-ui-protocol/ag-ui/commit/9b… | patch |
| https://github.com/ag-ui-protocol/ag-ui/releases/… | patch |
| https://github.com/ag-ui-protocol/ag-ui/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| ag-ui-protocol | ag-ui |
Affected:
0.3.0
Unaffected: AGUI.Abstractions@0.0.6 cpe:2.3:a:ag-ui-protocol:ag-ui:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-92359",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-16T13:15:05.598960Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-16T13:15:16.227Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ag-ui-protocol:ag-ui:*:*:*:*:*:*:*:*"
],
"modules": [
"CORSMiddleware"
],
"product": "ag-ui",
"vendor": "ag-ui-protocol",
"versions": [
{
"status": "affected",
"version": "0.3.0"
},
{
"status": "unaffected",
"version": "AGUI.Abstractions@0.0.6"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "colorfullbz (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. The affected element is the function create_strands_app of the file integrations/aws-strands/python/src/ag_ui_strands/utils.py of the component CORSMiddleware. The manipulation results in permissive cross-domain policy with untrusted domains. The attack may be launched remotely. The attack requires a high level of complexity. The exploitability is described as difficult. Upgrading to version AGUI.Abstractions@0.0.6 is sufficient to fix this issue. The patch is identified as 9b143b9668fa52c2054ede9d34a45ac4b4401089. It is suggested to upgrade the affected component."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 2.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:X/RL:O/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:X/RL:O/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 2.6,
"vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N/E:ND/RL:OF/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-942",
"description": "Permissive Cross-domain Policy with Untrusted Domains",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-346",
"description": "Origin Validation Error",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-16T12:00:16.220Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-405445 | ag-ui-protocol ag-ui CORSMiddleware utils.py create_strands_app cross-domain policy",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/405445"
},
{
"name": "VDB-405445 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/405445/cti"
},
{
"name": "CVE-2026-92359 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-92359"
},
{
"name": "Submit #934120 | ag-ui-protocol ag-ui 0.3.0 CWE-942",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/934120"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/ag-ui-protocol/ag-ui/issues/2433"
},
{
"tags": [
"issue-tracking",
"patch"
],
"url": "https://github.com/ag-ui-protocol/ag-ui/pull/2492"
},
{
"tags": [
"patch"
],
"url": "https://github.com/ag-ui-protocol/ag-ui/commit/9b143b9668fa52c2054ede9d34a45ac4b4401089"
},
{
"tags": [
"patch"
],
"url": "https://github.com/ag-ui-protocol/ag-ui/releases/tag/AGUI.Abstractions%400.0.6"
},
{
"tags": [
"product"
],
"url": "https://github.com/ag-ui-protocol/ag-ui/"
}
],
"tags": [
"x_open-source"
],
"timeline": [
{
"lang": "en",
"time": "2026-09-16T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-09-16T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-09-16T07:41:24.000Z",
"value": "VulDB entry last update"
}
],
"title": "ag-ui-protocol ag-ui CORSMiddleware utils.py create_strands_app cross-domain policy",
"x_generator": [
"VulDB PVTS v202609"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-92359",
"datePublished": "2026-09-16T12:00:16.220Z",
"dateReserved": "2026-09-16T05:36:01.573Z",
"dateUpdated": "2026-09-16T13:15:16.227Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-90882 (GCVE-0-2026-90882)
Vulnerability from cvelistv5 – Published: 2026-09-22 09:27 – Updated: 2026-09-22 13:06
VLAI
EPSS
VEX
Title
Reflected arbitrary origins with credentials, allowing cross-origin reads of authenticated user data
Summary
The open-vsx.org deployment returned Access-Control-Allow-Origin reflecting the requesting origin together with Access-Control-Allow-Credentials: true on the authenticated /user/ endpoints. A page on any origin could therefore issue credentialed requests to the service in a logged-in user's browser and read the responses.
This exposed /user (login name, avatar, homepage, tokens URL), /user/tokens, /user/namespaces, /user/extensions, /user/search/{name} and /user/namespace/{name}/members, and — because /user/csrf was readable the same way — allowed the CSRF protection on write endpoints to be defeated. Chaining the two, an attacker page could call /user/token/create and exfiltrate a personal access token carrying publish and delete rights over the victim's namespaces.
The headers were emitted by the CDN/edge layer, not by the application: the Open VSX software sets allowCredentials(true) in exactly one place, against a single exact origin derived from ovsx.webui.url, and defines no CORS mapping on /user/ beyond it. No configuration of the software produces origin reflection with credentials.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-22 13:06 UTC
CWE
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Eclipse Foundation | open-vsx.org |
Affected:
29/04/2026 , ≤ 07/09/2026
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-90882",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-22T13:06:04.901059Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-22T13:06:14.742Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "open-vsx.org",
"vendor": "Eclipse Foundation",
"versions": [
{
"lessThanOrEqual": "07/09/2026",
"status": "affected",
"version": "29/04/2026",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "https://github.com/Char0n1507"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eThe open-vsx.org deployment returned Access-Control-Allow-Origin reflecting the requesting origin together with Access-Control-Allow-Credentials: true on the authenticated /user/ endpoints. A page on any origin could therefore issue credentialed requests to the service in a logged-in user\u0027s browser and read the responses.\u003c/p\u003e\u003cp\u003eThis exposed /user (login name, avatar, homepage, tokens URL), /user/tokens, /user/namespaces, /user/extensions, /user/search/{name} and /user/namespace/{name}/members, and \u2014 because /user/csrf was readable the same way \u2014 allowed the CSRF protection on write endpoints to be defeated. Chaining the two, an attacker page could call /user/token/create and exfiltrate a personal access token carrying publish and delete rights over the victim\u0027s namespaces.\u003c/p\u003e\u003cp\u003eThe headers were emitted by the CDN/edge layer, not by the application: the Open VSX software sets allowCredentials(true) in exactly one place, against a single exact origin derived from ovsx.webui.url, and defines no CORS mapping on /user/ beyond it. No configuration of the software produces origin reflection with credentials.\u003c/p\u003e"
}
],
"value": "The open-vsx.org deployment returned Access-Control-Allow-Origin reflecting the requesting origin together with Access-Control-Allow-Credentials: true on the authenticated /user/ endpoints. A page on any origin could therefore issue credentialed requests to the service in a logged-in user\u0027s browser and read the responses.\n\n\n\nThis exposed /user (login name, avatar, homepage, tokens URL), /user/tokens, /user/namespaces, /user/extensions, /user/search/{name} and /user/namespace/{name}/members, and \u2014 because /user/csrf was readable the same way \u2014 allowed the CSRF protection on write endpoints to be defeated. Chaining the two, an attacker page could call /user/token/create and exfiltrate a personal access token carrying publish and delete rights over the victim\u0027s namespaces.\n\n\n\nThe headers were emitted by the CDN/edge layer, not by the application: the Open VSX software sets allowCredentials(true) in exactly one place, against a single exact origin derived from ovsx.webui.url, and defines no CORS mapping on /user/ beyond it. No configuration of the software produces origin reflection with credentials."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "PASSIVE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-942",
"description": "CWE-942",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-22T09:27:34.713Z",
"orgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c",
"shortName": "eclipse"
},
"references": [
{
"url": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/289"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Reflected arbitrary origins with credentials, allowing cross-origin reads of authenticated user data",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c",
"assignerShortName": "eclipse",
"cveId": "CVE-2026-90882",
"datePublished": "2026-09-22T09:27:34.713Z",
"dateReserved": "2026-09-14T07:44:22.377Z",
"dateUpdated": "2026-09-22T13:06:14.742Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-85313 (GCVE-0-2026-85313)
Vulnerability from cvelistv5 – Published: 2026-10-19 10:40 – Updated: 2026-10-19 14:33
VLAI
EPSS
VEX
Title
Apache Camel: Camel-Jetty Cross-Origin Credential Exposure via Allow-All CrossOriginFilter Defaults When enableCORS Is Set
Summary
Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Jetty component.
This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.
Setting enableCORS on a Jetty endpoint installed Jetty's CrossOriginFilter with its stock defaults, which accept every origin and allow credentials. An operator asking for CORS therefore obtained a policy that lets a page on any origin make credentialed cross-origin requests to the endpoint and read the responses, without any indication that turning the option on had chosen an allow-all policy rather than an empty one to be filled in. This is the same defect class as the platform-http-vertx advisory published alongside it, in a different component.
Upgrade to Apache Camel 4.23.0, which fixes the issue. Users on the 4.18.x LTS releases stream should upgrade to 4.18.5. Users on the 4.22.x LTS releases stream should upgrade to 4.22.1. enableCORS no longer grants credentials to an origin the operator did not name. A deployment that relied on any origin being accepted must now list its origins explicitly. For deployments that cannot upgrade immediately, configure the CrossOriginFilter parameters explicitly rather than relying on what enableCORS installs, naming the allowed origins.
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-19 14:33 UTC
CWE
- CWE-942 - Permissive Cross-domain Policy with Untrusted Domains
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://camel.apache.org/security/CVE-2026-85313.html | vendor-advisory |
| https://issues.apache.org/jira/browse/CAMEL-24450 | issue-tracking |
| https://github.com/apache/camel/pull/25829 | patch |
| https://github.com/apache/camel/pull/25937 | patch |
| https://github.com/apache/camel/pull/25938 | patch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Apache Software Foundation | Apache Camel |
Affected:
4.0.0 , < 4.18.5
(maven)
Affected: 4.19.0 , < 4.22.1 (maven) Unaffected: 4.18.5 (maven) Unaffected: 4.22.1 (maven) Unaffected: 4.23.0 (maven) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-85313",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-19T14:33:15.618494Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T14:33:28.013Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"collectionURL": "https://repo.maven.apache.org/maven2",
"defaultStatus": "unaffected",
"packageName": "org.apache.camel:camel-jetty",
"packageURL": "pkg:maven/org.apache.camel/camel-jetty",
"product": "Apache Camel",
"vendor": "Apache Software Foundation",
"versions": [
{
"lessThan": "4.18.5",
"status": "affected",
"version": "4.0.0",
"versionType": "maven"
},
{
"lessThan": "4.22.1",
"status": "affected",
"version": "4.19.0",
"versionType": "maven"
},
{
"status": "unaffected",
"version": "4.18.5",
"versionType": "maven"
},
{
"status": "unaffected",
"version": "4.22.1",
"versionType": "maven"
},
{
"status": "unaffected",
"version": "4.23.0",
"versionType": "maven"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Claude Security"
},
{
"lang": "en",
"type": "remediation developer",
"value": "Andrea Cosentino"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003ePermissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Jetty component.\u003cbr\u003e\u003cbr\u003eThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.\u003cbr\u003e\u003cbr\u003eSetting enableCORS on a Jetty endpoint installed Jetty\u0027s CrossOriginFilter with its stock defaults, which accept every origin and allow credentials. An operator asking for CORS therefore obtained a policy that lets a page on any origin make credentialed cross-origin requests to the endpoint and read the responses, without any indication that turning the option on had chosen an allow-all policy rather than an empty one to be filled in. This is the same defect class as the platform-http-vertx advisory published alongside it, in a different component.\u003cbr\u003e\u003cbr\u003eUpgrade to Apache Camel 4.23.0, which fixes the issue. Users on the 4.18.x LTS releases stream should upgrade to 4.18.5. Users on the 4.22.x LTS releases stream should upgrade to 4.22.1. enableCORS no longer grants credentials to an origin the operator did not name. A deployment that relied on any origin being accepted must now list its origins explicitly. For deployments that cannot upgrade immediately, configure the CrossOriginFilter parameters explicitly rather than relying on what enableCORS installs, naming the allowed origins.\u003c/p\u003e"
}
],
"value": "Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Jetty component.\n\nThis issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.\n\nSetting enableCORS on a Jetty endpoint installed Jetty\u0027s CrossOriginFilter with its stock defaults, which accept every origin and allow credentials. An operator asking for CORS therefore obtained a policy that lets a page on any origin make credentialed cross-origin requests to the endpoint and read the responses, without any indication that turning the option on had chosen an allow-all policy rather than an empty one to be filled in. This is the same defect class as the platform-http-vertx advisory published alongside it, in a different component.\n\nUpgrade to Apache Camel 4.23.0, which fixes the issue. Users on the 4.18.x LTS releases stream should upgrade to 4.18.5. Users on the 4.22.x LTS releases stream should upgrade to 4.22.1. enableCORS no longer grants credentials to an origin the operator did not name. A deployment that relied on any origin being accepted must now list its origins explicitly. For deployments that cannot upgrade immediately, configure the CrossOriginFilter parameters explicitly rather than relying on what enableCORS installs, naming the allowed origins."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-942",
"description": "CWE-942 Permissive Cross-domain Policy with Untrusted Domains",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-19T10:40:58.206Z",
"orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
"shortName": "apache"
},
"references": [
{
"name": "Apache Camel Security Advisory - CVE-2026-85313",
"tags": [
"vendor-advisory"
],
"url": "https://camel.apache.org/security/CVE-2026-85313.html"
},
{
"name": "CAMEL-24450",
"tags": [
"issue-tracking"
],
"url": "https://issues.apache.org/jira/browse/CAMEL-24450"
},
{
"name": "Fix on main, released in 4.23.0 (commit 6e3e4ec510b4966c70ad99b3c032e27d6adbef9d)",
"tags": [
"patch"
],
"url": "https://github.com/apache/camel/pull/25829"
},
{
"name": "Backport to camel-4.22.x, released in 4.22.1 (commit b0399b181d26cd8b136fa98b54ec8e5c283338da)",
"tags": [
"patch"
],
"url": "https://github.com/apache/camel/pull/25937"
},
{
"name": "Backport to camel-4.18.x, released in 4.18.5 (commit e23332aec12f7ec3a841e52d1821e2a580c2fbc7)",
"tags": [
"patch"
],
"url": "https://github.com/apache/camel/pull/25938"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eUpgrade to Apache Camel 4.23.0, which fixes the issue. Users on the 4.18.x LTS releases stream should upgrade to 4.18.5. Users on the 4.22.x LTS releases stream should upgrade to 4.22.1. enableCORS no longer grants credentials to an origin the operator did not name. A deployment that relied on any origin being accepted must now list its origins explicitly.\u003c/p\u003e"
}
],
"value": "Upgrade to Apache Camel 4.23.0, which fixes the issue. Users on the 4.18.x LTS releases stream should upgrade to 4.18.5. Users on the 4.22.x LTS releases stream should upgrade to 4.22.1. enableCORS no longer grants credentials to an origin the operator did not name. A deployment that relied on any origin being accepted must now list its origins explicitly."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Apache Camel: Camel-Jetty Cross-Origin Credential Exposure via Allow-All CrossOriginFilter Defaults When enableCORS Is Set",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eFor deployments that cannot upgrade immediately, configure the CrossOriginFilter parameters explicitly rather than relying on what enableCORS installs, naming the allowed origins.\u003c/p\u003e"
}
],
"value": "For deployments that cannot upgrade immediately, configure the CrossOriginFilter parameters explicitly rather than relying on what enableCORS installs, naming the allowed origins."
}
],
"x_generator": {
"engine": "Vulnogram 1.0.3"
}
}
},
"cveMetadata": {
"assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
"assignerShortName": "apache",
"cveId": "CVE-2026-85313",
"datePublished": "2026-10-19T10:40:58.206Z",
"dateReserved": "2026-09-03T16:43:32.647Z",
"dateUpdated": "2026-10-19T14:33:28.013Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-84452 (GCVE-0-2026-84452)
Vulnerability from cvelistv5 – Published: 2026-09-02 19:22 – Updated: 2026-09-03 16:01
VLAI
EPSS
VEX
Title
Windows ML CLI: CORS misconfig enables localhost RCE
Summary
Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cli_api.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the allow_origins setting as a wildcard in both src/winml/modelkit/serve/cli_api.py and src/winml/modelkit/serve/app.py. A malicious website loaded by a user can send cross-origin requests to /v1/cli/build or /v1/cli/config and set the trust_remote_code parameter to true, which is converted to the --trust-remote-code command-line flag without validation. This reaches AutoConfig.from_pretrained with trust_remote_code=True in src/winml/modelkit/loader/_autoconfig.py and imports Python code from an attacker-controlled model repository, resulting in arbitrary code execution as the server user. This issue is fixed in version 0.4.0.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-03 16:01 UTC
CWE
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/microsoft/winml-cli/security/a… | x_refsource_CONFIRM |
| https://github.com/microsoft/winml-cli/pull/1321 | x_refsource_MISC |
| https://github.com/microsoft/winml-cli/commit/f40… | x_refsource_MISC |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-84452",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-03T16:01:21.102609Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-03T16:01:26.554Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/microsoft/winml-cli/security/advisories/GHSA-96p9-rh4f-92cf"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "winml-cli",
"vendor": "microsoft",
"versions": [
{
"status": "affected",
"version": "\u003c 0.4.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cli_api.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the allow_origins setting as a wildcard in both src/winml/modelkit/serve/cli_api.py and src/winml/modelkit/serve/app.py. A malicious website loaded by a user can send cross-origin requests to /v1/cli/build or /v1/cli/config and set the trust_remote_code parameter to true, which is converted to the --trust-remote-code command-line flag without validation. This reaches AutoConfig.from_pretrained with trust_remote_code=True in src/winml/modelkit/loader/_autoconfig.py and imports Python code from an attacker-controlled model repository, resulting in arbitrary code execution as the server user. This issue is fixed in version 0.4.0."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"privilegesRequired": "NONE",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "ACTIVE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-942",
"description": "CWE-942: Permissive Cross-domain Policy with Untrusted Domains",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306: Missing Authentication for Critical Function",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-02T19:22:55.672Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/microsoft/winml-cli/security/advisories/GHSA-96p9-rh4f-92cf",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/microsoft/winml-cli/security/advisories/GHSA-96p9-rh4f-92cf"
},
{
"name": "https://github.com/microsoft/winml-cli/pull/1321",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/microsoft/winml-cli/pull/1321"
},
{
"name": "https://github.com/microsoft/winml-cli/commit/f4073e0ef4700a25b623487e7e45c421ca0b9993",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/microsoft/winml-cli/commit/f4073e0ef4700a25b623487e7e45c421ca0b9993"
}
],
"source": {
"advisory": "GHSA-96p9-rh4f-92cf",
"discovery": "UNKNOWN"
},
"title": "Windows ML CLI: CORS misconfig enables localhost RCE"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-84452",
"datePublished": "2026-09-02T19:22:55.672Z",
"dateReserved": "2026-09-01T20:05:09.423Z",
"dateUpdated": "2026-09-03T16:01:26.554Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
Mitigation
Architecture and Design
Operation
Strategy: Attack Surface Reduction
Define a restrictive Content Security Policy [REF-1486] or cross-domain policy file.
Mitigation
Architecture and Design
Operation
Strategy: Attack Surface Reduction
Avoid using wildcards in the CSP / cross-domain policy file. Any domain matching the wildcard expression will be implicitly trusted, and can perform two-way interaction with the target server.
Mitigation
Architecture and Design
Operation
Strategy: Environment Hardening
For Flash, modify crossdomain.xml to use meta-policy options such as 'master-only' or 'none' to reduce the possibility of an attacker planting extraneous cross-domain policy files on a server.
No CAPEC attack patterns related to this CWE.