Threats Tagged 'ghsa-g936-7jqj-mwv8'
View all threats tagged with 'ghsa-g936-7jqj-mwv8'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-g936-7jqj-mwv8'
Click on any threat for detailed analysis and mitigation recommendations
GHSA-g936-7jqj-mwv8: TSDProxy: Internal proxy auth token forwarded to backend services enables management API escalation 0 TSDProxy forwards an internal per-process authentication token to all proxied backend services when identityHeaders is enabled by default. This token is used by the management HTTP server to trust forwarded identity claims. A backend receiving this token can replay it locally to the management API with an arbitrary identity header, bypassing authentication. This allows an attacker with code execution in any backend on the same host to gain full management API control, including restarting or pausing services, enumerating proxy configurations, and triggering webhook deliveries. The vulnerability affects deployments where the backend can reach 127.0.0.1:8080, such as non-Docker hosts, Docker containers in host network mode, or containers sharing the proxy's network namespace. The fix involves removing the auth token from backend requests and only injecting identity headers for authenticated users. Join the discussion | GCVE Database | 07/10/2026, 21:43:13 UTC Added: 07/11/2026, 09:36:43 UTC |
Showing 1 to 1 of 1 result