Skip to content
Threat Feed
Subscribe

Vendor

Almeidapaulopt

1 brief RSS
critical advisory

TSDProxy Internal Authentication Token Vulnerability Leading to Management API Escalation

A critical vulnerability in TSDProxy allows its internal per-process authentication token to be unconditionally forwarded to proxied backend services when `identityHeaders` is enabled, enabling an attacker with code execution on a co-located backend to replay the token to the local TSDProxy management API (port 8080) and bypass authentication, leading to full management API control.

tsdproxy < 1.4.4-0.20260603142855-434819b4421e vulnerability privilege-escalation authentication-bypass tsdproxy go
1r 4t 1i