# CWE-1327.

Every Advisory and CVE whose sources give the weakness CWE-1327, newest first.

## Records, newest first

- [Ubiquiti Inc WiFiman Desktop: A malicious actor with access to the network could exploit a Binding to an Unrestricted…](https://agentprime.io/advisories/CVE-2026-119249.md)
  `CVE-2026-119249` · CVE record: Ubiquiti Inc WiFiman Desktop · CVSS 7.5 High · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-1327
- [OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE](https://agentprime.io/advisories/CVE-2026-112346.md)
  `CVE-2026-112346` · CVE record: OpenHands OpenHands Software Agent SDK · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-1327
- [IBM App Connect Enterprise is vulnerable to a credential exposure](https://agentprime.io/advisories/CVE-2026-92559.md)
  `CVE-2026-92559` · CVE record: IBM App Connect Enterprise · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-1327
- [LlamaFarm through 0.0.34 Unauthenticated API Exposed on All Interfaces](https://agentprime.io/advisories/CVE-2026-108760.md)
  `CVE-2026-108760` · CVE record: llama-farm llamafarm · CVSS 7.2 High · Not analysed yet · Published 11 Oct 2026 · Tags: CWE-1327
- [Penpot before 2.18.0 Unauthenticated WebSocket Access via MCP Bridge](https://agentprime.io/advisories/CVE-2026-100868.md)
  `CVE-2026-100868` · CVE record: penpot penpot and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 27 Sept 2026 · Tags: CWE-1327
- [ESPHome Device Builder Dashboard: Unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces](https://agentprime.io/advisories/GHSA-vv4j-m4vr-f3g6.md)
  `GHSA-vv4j-m4vr-f3g6`, `CVE-2026-59177`, `PYSEC-2026-3834` · PyPI `esphome-device-builder`: affected `<1.0.10`, fixed in `1.0.10` · CVSS 8.8 High · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-1327
- [fastify-cli vulnerable to remote code execution via ignored explicit Inspector bind address](https://agentprime.io/advisories/CVE-2026-75021.md)
  `CVE-2026-75021` · CVE record: fastify-cli fastify-cli · CVSS 8.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-1327
- [Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-20212.md)
  `CVE-2026-20212` · CVE record: Cisco Cisco NX-OS Software · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-1327
- [argocd-mcp 0.8.0 Authentication Bypass via Unauthenticated HTTP](https://agentprime.io/advisories/CVE-2026-82456.md)
  `CVE-2026-82456` · CVE record: argoproj-labs argocd-mcp · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Aug 2026 · Tags: CWE-1327
- [9router: Unauthenticated \`/v1\` proxy access via \`Host\`-header spoofing → open AI relay + SSRF](https://agentprime.io/advisories/GHSA-86m2-fcxq-5q7c.md)
  `GHSA-86m2-fcxq-5q7c`, `CVE-2026-55641` · npm `9router`: affected `<0.5.2`, fixed in `0.5.2` · CVSS 8.2 High · Not analysed yet · Published 28 Aug 2026 · Tags: Authentication bypass, Server-side request forgery (SSRF), CWE-348, CWE-1327
- [GitHub CLI: \`gh codespace ports forward\` exposes forwarded services on all network interfaces by default](https://agentprime.io/advisories/CVE-2026-72924.md)
  `CVE-2026-72924` · CVE record: cli cli · CVSS 2.1 Low · Not analysed yet · Published 25 Aug 2026 · Tags: Information disclosure, CWE-1327
- [IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution](https://agentprime.io/advisories/CVE-2026-16713.md)
  `CVE-2026-16713` · CVE record: IBM Documentation Offline · CVSS 4.3 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: CWE-1327
- [VPS.org one-click Supabase template deployment instance contains multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-16503.md)
  `CVE-2026-16503` · CVE record: VPS.org Supabase template · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Jul 2026 · Tags: CWE-1188, CWE-1327, CWE-1393
- [Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces](https://agentprime.io/advisories/CVE-2026-47873.md)
  `CVE-2026-47873` · CVE record: Spring Spring Tools for Eclipse · CVSS 8.0 High · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-1327
- [PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in](https://agentprime.io/advisories/GHSA-x227-pf99-vffg.md)
  `GHSA-x227-pf99-vffg`, `CVE-2026-57123`, `PYSEC-2026-3536` · PyPI `praisonaiagents`: affected `<1.6.59`, fixed in `1.6.59` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Jun 2026 · Tags: Authentication bypass, CWE-350, CWE-1327
- [Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in lo…](https://agentprime.io/advisories/CVE-2026-0481.md)
  `CVE-2026-0481` · CVE record: AMD AMD Instinct™ MI210 and 4 more · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 May 2026 · Tags: CWE-1327
- [Accidental binding to INADDR_ANY might lead to RCE in golang.org/x/tools/gopls](https://agentprime.io/advisories/CVE-2026-42503.md)
  `CVE-2026-42503` · CVE record: golang.org/x/tools golang.org/x/tools/gopls · CVSS 8.8 High · Not analysed yet · Published 6 May 2026 · Tags: CWE-1327
- [OpenClaw: Sandbox browser CDP relay could expose DevTools protocol on 0.0.0.0](https://agentprime.io/advisories/GHSA-525j-hqq2-66r4.md)
  `GHSA-525j-hqq2-66r4`, `CVE-2026-43581` · npm `openclaw`: affected `<2026.4.10`, fixed in `2026.4.10` · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Apr 2026 · Tags: Broken access control, CWE-1188, CWE-1327
- [Apache IoTDB has an Insecure Default Configuration Vulnerability](https://agentprime.io/advisories/GHSA-74cf-pgh9-m5q2.md)
  `GHSA-74cf-pgh9-m5q2`, `CVE-2026-24015` · Maven `org.apache.iotdb:iotdb-core`: affected `>=1.0.0, <1.3.7 || >=2.0.0, <2.0.7`, fixed in `1.3.7`, `2.0.7` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Mar 2026 · Tags: CWE-1327
- [OpenClaw's Chrome extension relay binds publicly due to wildcard treated as loopback](https://agentprime.io/advisories/GHSA-qw99-grcx-4pvm.md)
  `GHSA-qw99-grcx-4pvm`, `CVE-2026-28395` · npm `openclaw`: affected `>=2026.1.14-1, <2026.2.12`, fixed in `2026.2.12` · CVSS 6.3 Medium · Not analysed yet · Published 17 Feb 2026 · Tags: Broken access control, CWE-1327
- [Azure IoT Explorer Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-21528.md)
  `CVE-2026-21528` · CVE record: Microsoft Azure IoT Explorer · CVSS 6.5 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-1327
- [Keycloak has debug default bind address](https://agentprime.io/advisories/GHSA-j4vq-q93m-4683.md)
  `GHSA-j4vq-q93m-4683`, `CVE-2025-11538` · Maven `org.keycloak:keycloak-quarkus-dist`: affected `<26.4.4`, fixed in `26.4.4` · CVSS 6.8 Medium · Not analysed yet · Published 2 Dec 2025 · Tags: CWE-1327
- [Duplicate Advisory: Keycloak allows Binding to an Unrestricted IP Address](https://agentprime.io/advisories/GHSA-7m9g-pmxf-m9m8.md)
  `GHSA-7m9g-pmxf-m9m8` · Maven `org.keycloak:keycloak-quarkus-server`: affected `<=26.4.4`, no fixed version yet · CVSS 6.8 Medium · Withdrawn · Not analysed yet · Published 13 Nov 2025 · Tags: CWE-1327
- [AutomationDirect Productivity Suite Binding to an Unrestricted IP Address CWE-1327](https://agentprime.io/advisories/CVE-2025-61934.md)
  `CVE-2025-61934` · CVE record: AutomationDirect Productivity Suite and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Oct 2025 · Tags: CWE-1327
- [OmniParser Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-55322.md)
  `CVE-2025-55322` · CVE record: Microsoft OmniParser · CVSS 7.3 High · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-1327
- [Remote Code Execution in ProTNS ActADUR](https://agentprime.io/advisories/CVE-2025-3621.md)
  `CVE-2025-3621` · CVE record: ProTNS ActADUR · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Jul 2025 · Tags: Command injection, Authentication bypass, Hard-coded credentials, CWE-1327
- [Excessive attack surface in acep-collector service due to binding to an unrestricted IP address.](https://agentprime.io/advisories/CVE-2024-49384.md)
  `CVE-2024-49384` · CVE record: Acronis Acronis Cyber Protect 16 · CVSS 3.5 Low · Not analysed yet · Published 15 Oct 2024 · Tags: CWE-1327
- [Excessive attack surface in acep-importer service due to binding to an unrestricted IP address.](https://agentprime.io/advisories/CVE-2024-49383.md)
  `CVE-2024-49383` · CVE record: Acronis Acronis Cyber Protect 16 · CVSS 3.5 Low · Not analysed yet · Published 15 Oct 2024 · Tags: CWE-1327
- [Excessive attack surface in archive-server service due to binding to an unrestricted IP address.](https://agentprime.io/advisories/CVE-2024-49382.md)
  `CVE-2024-49382` · CVE record: Acronis Acronis Cyber Protect 16 · CVSS 3.5 Low · Not analysed yet · Published 15 Oct 2024 · Tags: CWE-1327
- [cups-browsed binds to \`INADDR_ANY:631\`, trusting any packet from any source](https://agentprime.io/advisories/CVE-2024-47176.md)
  `CVE-2024-47176` · CVE record: OpenPrinting cups-browsed · CVSS 5.3 Medium · EPSS 0.51 · Not analysed yet · Published 26 Sept 2024 · Tags: CWE-1327
- [dbt allows Binding to an Unrestricted IP Address via socketsocket](https://agentprime.io/advisories/GHSA-pmrx-695r-4349.md)
  `GHSA-pmrx-695r-4349`, `CVE-2024-36105`, `PYSEC-2026-1292` · PyPI `dbt-core`: affected `<1.6.15 || >=1.7.0, <1.7.15 || >=1.8.0, <1.8.1`, fixed in `1.6.15`, `1.7.15`, `1.8.1` · CVSS 5.3 Medium · Not analysed yet · Published 28 May 2024 · Tags: CWE-1327
- [Server receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service.](https://agentprime.io/advisories/CVE-2023-5398.md)
  `CVE-2023-5398` · CVE record: Honeywell Experion Server · CVSS 5.9 Medium · Not analysed yet · Published 17 Apr 2024 · Tags: CWE-1327
- [Excessive attack surface due to binding to an unrestricted IP address.](https://agentprime.io/advisories/CVE-2023-41742.md)
  `CVE-2023-41742` · CVE record: Acronis Acronis Agent and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 31 Aug 2023 · Tags: CWE-1327
- [CVE-2023-1968](https://agentprime.io/advisories/CVE-2023-1968.md)
  `CVE-2023-1968` · CVE record: Illumina iScan Control Software and 4 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Apr 2023 · Tags: CWE-1327
- [JetBrains PyCharm: In JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network…](https://agentprime.io/advisories/CVE-2022-29820.md)
  `CVE-2022-29820` · CVE record: JetBrains PyCharm · CVSS 3.0 Low · Not analysed yet · Published 28 Apr 2022 · Tags: CWE-1327

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-1327>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-1327/>. Everything for agents: <https://agentprime.io/llms.txt>.