Skip to content
Threat Feed
Subscribe

Tag

Cross-Origin

6 briefs RSS
high advisory

Cross-Origin Message Handling Vulnerability in Open WebUI

Open WebUI versions 0.7.0 through 0.11.3 contain a cross-origin message handling vulnerability that allows unauthenticated websites to steal a user's session JWT via a crafted postMessage payload.

Open WebUI +2 web-vulnerability cross-origin authentication-bypass api-security privilege-escalation web-application security-update
4t 1c
critical advisory

Joro: Unauthenticated Cross-Origin Plugin Upload Leads to RCE

Joro's default proxy mode (versions ≤ v1.1.0) is vulnerable to unauthenticated remote code execution (CVE-2026-53649) via a local API on `127.0.0.1:9090` that allows cross-origin JavaScript to upload a malicious native plugin and trigger a system restart, leading to RCE as the operator's user from a single page visit.

Joro rce web-exploitation vulnerability javascript cross-origin cors
2r 5t 1i
high advisory

Network-AI Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret (CVE-2026-46701)

Network-AI is vulnerable to an unauthenticated cross-origin attack due to an empty default secret and permissive CORS configuration, allowing an attacker to lure a user to a malicious web page and invoke MCP tools like config_set, agent_spawn, and blackboard_write against a default-configured localhost server.

Network-AI cve cve-2026-46701 network cross-origin authentication bypass
2r 1t
high advisory

cpp-httplib Vulnerability Leads to Credential Leakage via HTTP Redirects

The cpp-httplib library prior to version 0.39.0 forwards stored authentication credentials to arbitrary hosts via HTTP redirects, potentially exposing sensitive information to malicious actors.

cpp-httplib credential-leak cve-2026-33745 http-redirect credential-access cross-origin
2r 1t
high advisory

OpenClaw fetchWithSsrFGuard replays unsafe request bodies across cross-origin redirects

The `fetchWithSsrFGuard` function in OpenClaw replays unsafe request bodies across cross-origin redirects, potentially leading to the exposure of sensitive information when following cross-origin redirects in versions prior to 2026.4.8.

ssrf openclaw cross-origin
2r 1t
critical advisory

Cline Kanban Server Cross-Origin WebSocket Hijacking Vulnerability

The `kanban` npm package, used by the `cline` CLI, has a cross-origin WebSocket hijacking vulnerability. Due to the lack of Origin header validation, any website can connect to the kanban server via WebSocket and leak sensitive data, hijack running AI agent terminals leading to remote code execution, or kill running agent tasks, resulting in information disclosure, RCE, and denial of service.

cline +1 websocket cross-origin rce infoleak dos
3r 4t 1i