AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, On default installations where no password or API key has been configured, all HTTP endpoints and the agent WebSocket lack authentication, and the server's CORS policy accepts any origin. AnythingLLM Desktop binds to 127.0.0.1 (loopback) by default. Modern browsers (Chrome, Edge, Firefox) implement Private Network Access (PNA). This explicitly blocks public websites from making requests to local IP addresses. Exploitation is only viable from within the same local network (LAN) due to browser-level blocking of public-to-private requests.
CVE-2026-28792 is a critical path traversal vulnerability in the @tinacms CLI dev server prior to version 2.1.8. The vulnerability arises from a combination of a permissive CORS policy (Access-Control-Allow-Origin: *) and improper pathname limitation, allowing remote attackers to perform browser-based drive-by attacks. By tricking developers into visiting a malicious website while the tinacms dev server is running, attackers can enumerate, write, and delete arbitrary files on the developer's machine. This vulnerability affects versions before 2.1.8 and has a CVSS score of 9.7, indicating critical severity. No known exploits are currently reported in the wild.
CollabPlatform is a full-stack, real-time doc collaboration platform. In all versions of CollabPlatform, the Appwrite project used by the application is misconfigured to allow arbitrary origins in CORS responses while also permitting credentialed requests. An attacker-controlled domain can issue authenticated cross-origin requests and read sensitive user account information, including email address, account identifiers, and MFA status. The issue did not have a fix at the time of publication.
A permissive web security configuration may allow cross-origin restrictions enforced by modern browsers to be bypassed under specific circumstances. Exploitation requires the presence of an existing client-side injection vulnerability and user access to the affected web interface. Successful exploitation could allow unauthorized disclosure of sensitive information. Fixed in updated Omada Cloud Controller service versions deployed automatically by TP‑Link. No user action is required.
CVE-2026-25478 is a high-severity vulnerability in the litestar ASGI framework versions prior to 2.20.0. It arises from improper construction of the allowed_origins_regex used for CORS origin validation, where metacharacters in the allowlist are not escaped. This flaw allows malicious origins to bypass the intended restrictions, potentially enabling cross-domain attacks. Exploitation requires user interaction but no authentication, and it can lead to a breach of confidentiality by exposing sensitive data to untrusted domains. The vulnerability affects web applications using litestar for asynchronous server gateway interfaces, particularly those relying on CORS for security. Although no known exploits are currently in the wild, the vulnerability's nature and CVSS score of 7.4 indicate a significant risk. European organizations using litestar in web services should prioritize upgrading to version 2.
CVE-2025-13984 is a medium severity vulnerability in Drupal's Next.js integration involving a permissive cross-domain security policy that allows untrusted domains. This misconfiguration enables Cross-Site Scripting (XSS) attacks by permitting malicious domains to execute scripts in the context of trusted sites. The vulnerability affects Next.js versions from 0.0.0 before 1.6.4 and from 2.0.
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) implement an insecure Cross-Origin Resource Sharing (CORS) policy on authenticated administrative endpoints. The device sets Access-Control-Allow-Origin: * in combination with Access-Control-Allow-Credentials: true, allowing attacker-controlled origins to issue credentialed cross-origin requests.
Altium 365 workspace endpoints were configured with an overly permissive Cross-Origin Resource Sharing (CORS) policy that allowed credentialed cross-origin requests from other Altium-controlled subdomains, including forum.live.altium.com. As a result, JavaScript executing on those origins could access authenticated workspace APIs in the context of a logged-in user. When chained with vulnerabilities in those external applications, this misconfiguration enables unauthorized access to workspace data, administrative actions, and bypass of IP allowlisting controls, including in GovCloud environments.
CVE-2026-22812 is a high-severity vulnerability in anomalyco's OpenCode AI coding agent versions prior to 1.0.216. The flaw involves the automatic startup of an unauthenticated HTTP server that permits any local process or any website (due to permissive CORS settings) to execute arbitrary shell commands with the user's privileges. This missing authentication for a critical function allows attackers to compromise confidentiality, integrity, and availability of affected systems. The vulnerability is fixed in version 1.0.216. Although no known exploits are currently reported in the wild, the ease of exploitation and potential impact make it a significant threat. European organizations using vulnerable OpenCode versions are at risk, especially those with development environments or CI/CD pipelines integrating this tool.
CVE-2025-43480 is a high-severity vulnerability in Apple Safari that allows a malicious website to exfiltrate data across origins. The issue involves insufficient cross-origin data access checks, which could lead to unauthorized data leakage. Apple addressed this vulnerability with improved checks and fixed it in Safari 26.1 and corresponding OS versions including iOS 26.1, iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, and watchOS 26.1.
PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. PILOS before 4.8.0 includes a Cross-Origin Resource Sharing (CORS) misconfiguration in its middleware: it reflects the Origin request header back in the Access-Control-Allow-Origin response header without proper validation or a whitelist, while Access-Control-Allow-Credentials is set to true. This behavior could allow a malicious website on a different origin to send requests (including credentials) to the PILOS API. This may enable exfiltration or actions using the victim’s credentials if the server accepts those cross-origin requests as authenticated. Laravel’s session handling applies additional origin checks such that cross-origin requests are not authenticated by default. Because of these session-origin protections, and in the absence of any other unknown vulnerabilities that would bypass Laravel’s origin/session checks, this reflected-Origin CORS misconfiguration is not believed to be exploitable in typical PILOS deployments. This vulnerability has been patched in PILOS in v4.8.0
Incorrect Cross-Origin Resource Sharing (CORS) configuration in Hiberus Sintra. Cross-Origin Resource Sharing (CORS) allows browsers to make cross-domain requests in a controlled manner. This request has an “Origin” header that identifies the domain making the initial request and defines the protocol between a browser and a server to see if the request is allowed. An attacker can exploit this and potentially perform privileged actions and access confidential information when Access-Control-Allow-Credentials is enabled.
claude-code-router is a powerful tool to route Claude Code requests to different models and customize any request. Due to improper Cross-Origin Resource Sharing (CORS) configuration, there is a risk that user API Keys or equivalent credentials may be exposed to untrusted domains. Attackers could exploit this misconfiguration to steal credentials, abuse accounts, exhaust quotas, or access sensitive data. The issue has been patched in v1.0.34.
IBM Concert Software 1.0.0 through 1.1.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains.
An unauthenticated remote attacker can trick an admin to visit a website containing malicious java script code. The current overly permissive CORS policy allows the attacker to obtain any files from the file system.
In IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04, a configuration error has been detected in cross-origin resource sharing (CORS). Exploiting this vulnerability requires authenticating to the device and executing certain commands that can only be executed with permissions higher than the view permission.
In IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04, a configuration error has been detected in cross-origin resource sharing (CORS). Exploiting this vulnerability requires authenticating to the device and executing certain commands that can be executed with view permission.