# CWE-346.

Every Advisory and CVE whose sources give the weakness CWE-346, newest first.

## Records, newest first

- [mcp-go before v1.2.1 Origin Validation Error via Unvalidated Well-Known Protected Resource Metadata](https://agentprime.io/advisories/CVE-2026-123272.md)
  `CVE-2026-123272` · CVE record: mark3labs mcp-go · CVSS 5.1 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: CWE-346
- [ChatCLI before v1.215.2 Origin Validation Error via Unvalidated MCP OAuth Resource Indicator](https://agentprime.io/advisories/CVE-2026-123271.md)
  `CVE-2026-123271` · CVE record: diillson ChatCLI · CVSS 5.1 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: CWE-346
- [kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts](https://agentprime.io/advisories/GHSA-5q7h-w9jf-cx97.md)
  `GHSA-5q7h-w9jf-cx97`, `CVE-2026-105769`, `GO-2026-6902` · Go `github.com/chainguard-dev/kaniko`: affected `<1.25.20`, fixed in `1.25.20` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Nov 2026 · Tags: Hard-coded credentials, CWE-346
- [Cocos Intra-handshake attested TLS implementation is vulnerable to Diversion Attacks](https://agentprime.io/advisories/CVE-2026-119344.md)
  `CVE-2026-119344` · CVE record: ultravioletrs cocos · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Nov 2026 · Tags: CWE-346
- [GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin](https://agentprime.io/advisories/CVE-2026-102895.md)
  `CVE-2026-102895` · CVE record: gpustack gpustack · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Authentication bypass, CWE-346
- [OmniAuth: Host Header Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-63183.md)
  `CVE-2026-63183` · CVE record: omniauth omniauth · CVSS 6.9 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-346
- [SharpEmu: Cross-site request forgery in the debugger frontend leads to arbitrary process execution](https://agentprime.io/advisories/CVE-2026-92704.md)
  `CVE-2026-92704` · CVE record: sharpemu sharpemu · CVSS 8.3 High · Not analysed yet · Published 4 Nov 2026 · Tags: Authentication bypass, Cross-site request forgery (CSRF), CWE-346, CWE-350
- [Insecure Configuration Vulnerability in Tata Motors iRA and iRA.ev mobile application](https://agentprime.io/advisories/CVE-2026-121145.md)
  `CVE-2026-121145` · CVE record: Tata Motors Tata Motors iRA 2.0 and 1 more · CVSS 7.1 High · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-346, CWE-749
- [Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers](https://agentprime.io/advisories/CVE-2026-114456.md)
  `CVE-2026-114456` · CVE record: Snowflake Snowflake Connector for Python and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-346
- [Origin validation error in better-auth Better Auth](https://agentprime.io/advisories/CVE-2026-121802.md)
  `CVE-2026-121802` · CVE record: better-auth Better Auth · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-346
- [Origin validation error in NAVER Whale browser](https://agentprime.io/advisories/CVE-2026-120987.md)
  `CVE-2026-120987` · CVE record: NAVER NAVER Whale browser · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-346
- [Google::Auth versions from 0.11 through 0.12 for Perl accept an authorization code from any local process because the gcloud-auth login callback does not check the OAuth state](https://agentprime.io/advisories/CVE-2026-74760.md)
  `CVE-2026-74760` · CVE record · No CVSS score · Not analysed yet · Published 1 Nov 2026 · Tags: CWE-346
- [Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads](https://agentprime.io/advisories/GHSA-g5jq-qmqr-qrwf.md)
  `GHSA-g5jq-qmqr-qrwf`, `CVE-2026-119285`, `GO-2026-6896` · Go `github.com/gofiber/fiber/v2`: affected `>=2.52.1, <2.52.3`, fixed in `2.52.3` · CVSS 5.9 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-346, CWE-942
- [Ladybird: Missing origin-clean enforcement in CSSStyleSheet allows cross-origin CSS read and mutation](https://agentprime.io/advisories/CVE-2026-119331.md)
  `CVE-2026-119331` · CVE record: LadybirdBrowser ladybird · CVSS 7.1 High · Not analysed yet · Published 30 Oct 2026 · Tags: Information disclosure, CWE-346
- [WIT SynApps Runtime 1.4.11 Browser-Mediated SSRF via Controller Onboarding](https://agentprime.io/advisories/CVE-2026-7005.md)
  `CVE-2026-7005` · CVE record: WIT SynApps Runtime · CVSS 5.3 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-346
- [CakePHP through 5.4.3 Cookie Leakage via HTTP Client CookieCollection Domain Matching](https://agentprime.io/advisories/CVE-2026-119416.md)
  `CVE-2026-119416` · CVE record: cakephp cakephp · CVSS 6.3 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-76026.md)
  `CVE-2026-76026` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-346
- [AnkiMCP: DNS rebinding reaches unauthenticated local AnkiMCP HTTP tools](https://agentprime.io/advisories/CVE-2026-61546.md)
  `CVE-2026-61546` · CVE record: ankimcp anki-mcp-server-addon · CVSS 8.8 High · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-346, CWE-350
- [Echo: HTTPS Redirect and HSTS Bypass via Unconditional Trust of Forwarded Scheme Headers](https://agentprime.io/advisories/GHSA-2ffq-g2xg-c22p.md)
  `GHSA-2ffq-g2xg-c22p`, `CVE-2026-118657`, `GO-2026-6879` · Go `github.com/labstack/echo/v4` and 1 more: affected `<4.16.0`, fixed in `4.16.0` · CVSS 5.9 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-346
- [Echo: Reverse Proxy Forwards Attacker-Supplied X-Real-IP to Upstream by Default](https://agentprime.io/advisories/GHSA-99jh-6h7p-pp36.md)
  `GHSA-99jh-6h7p-pp36`, `CVE-2026-118651`, `GO-2026-6875` · Go `github.com/labstack/echo/v4` and 1 more: affected `>=4.0.0, <=4.16.2`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-346
- [undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects](https://agentprime.io/advisories/GHSA-4w7w-5xrc-9h26.md)
  `GHSA-4w7w-5xrc-9h26`, `CVE-2026-109829` · npm `undici`: affected `>=7.0.0, <7.30.1 || >=8.0.0, <8.12.2`, fixed in `7.30.1`, `8.12.2` · CVSS 7.4 High · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-346, CWE-524
- [AWS API MCP Server OAuth Token Audience Validation Bypass](https://agentprime.io/advisories/CVE-2026-115413.md)
  `CVE-2026-115413` · CVE record: AWS aws-api-mcp-server · CVSS 7.3 High · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-346
- [Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking](https://agentprime.io/advisories/CVE-2026-82332.md)
  `CVE-2026-82332` · CVE record: WatchGuard Fireware OS · CVSS 5.6 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass, CWE-346
- [Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation](https://agentprime.io/advisories/GHSA-jj36-9pvh-vj5r.md)
  `GHSA-jj36-9pvh-vj5r`, `CVE-2026-83813` · PyPI `twisted`: affected `<26.10.0rc1`, fixed in `26.10.0rc1` · CVSS 3.1 Low · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-346
- [Site isolation issue in the DOM: Navigation component](https://agentprime.io/advisories/CVE-2026-117976.md)
  `CVE-2026-117976` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-346
- [Site isolation issue in the Networking: HTTP component](https://agentprime.io/advisories/CVE-2026-117966.md)
  `CVE-2026-117966` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-346
- [Same-origin policy bypass in the Address Bar component](https://agentprime.io/advisories/CVE-2026-117965.md)
  `CVE-2026-117965` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-346
- [Site isolation issue in the Networking: HTTP component](https://agentprime.io/advisories/CVE-2026-117958.md)
  `CVE-2026-117958` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-346
- [Same-origin policy bypass in the CSS Parsing and Computation component](https://agentprime.io/advisories/CVE-2026-117928.md)
  `CVE-2026-117928` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-346
- [Same-origin policy bypass in the CSS Parsing and Computation component](https://agentprime.io/advisories/CVE-2026-117912.md)
  `CVE-2026-117912` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-346
- [Same-origin policy bypass in the DOM: Navigation component](https://agentprime.io/advisories/CVE-2026-117860.md)
  `CVE-2026-117860` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-346
- [Push Endpoint Returns Permissive CORS Headers](https://agentprime.io/advisories/CVE-2026-110737.md)
  `CVE-2026-110737` · CVE record: vaadin vaadin and 2 more · CVSS 2.3 Low · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-346, CWE-942
- [Origin Validation Error Vulnerability in HiRDB](https://agentprime.io/advisories/CVE-2026-82121.md)
  `CVE-2026-82121` · CVE record: Hitachi HiRDB Server Version 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-346
- [rathena FluxCP PayPal IPN PaymentNotifyRequest.php verifyiprange origin validation](https://agentprime.io/advisories/CVE-2026-116254.md)
  `CVE-2026-116254` · CVE record: rathena FluxCP · CVSS 6.9 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-345, CWE-346
- [Rclone 1.52.0 before 1.75.2 CSRF via pCloud OAuth Callback](https://agentprime.io/advisories/CVE-2026-116194.md)
  `CVE-2026-116194` · CVE record: rclone rclone · CVSS 7.6 High · Not analysed yet · Published 25 Oct 2026 · Tags: CWE-346
- [MSAL Node authorization code flow may disclose parameters to an attacker-controlled endpoint](https://agentprime.io/advisories/GHSA-xcx6-jx8p-x3h5.md)
  `GHSA-xcx6-jx8p-x3h5`, `CVE-2026-109461` · npm `@azure/msal-node`: affected `>=5.0.0-beta.0, <7.1.0`, fixed in `7.1.0` · CVSS 5.9 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: CWE-346
- [WireGuard peer endpoint learned from unauthenticated transport-data messages allows off-path tunnel hijack in Zephyr](https://agentprime.io/advisories/CVE-2026-79977.md)
  `CVE-2026-79977` · CVE record: zephyrproject zephyr · CVSS 8.2 High · Not analysed yet · Published 23 Oct 2026 · Tags: Authentication bypass, CWE-346
- [obsidian-tc HTTP transport lacks Origin/DNS-rebinding protection, enabling drive-by vault access on loopback](https://agentprime.io/advisories/GHSA-pqh8-4pj7-32xx.md)
  `GHSA-pqh8-4pj7-32xx`, `CVE-2026-77363` · npm `obsidian-tc`: affected `<1.3.1`, fixed in `1.3.1` · CVSS 8.8 High · Not analysed yet · Published 23 Oct 2026 · Tags: CWE-346, CWE-1385
- [VLC for Android before 3.7.2 File Overwrite via Spoofed Mail Attachment Provider](https://agentprime.io/advisories/CVE-2026-115724.md)
  `CVE-2026-115724` · CVE record: VideoLAN VLC for Android · CVSS 2.1 Low · Not analysed yet · Published 23 Oct 2026 · Tags: CWE-346
- [Electron: Pointer lock permission requests can be attributed to the wrong frame](https://agentprime.io/advisories/GHSA-x562-297c-g43g.md)
  `GHSA-x562-297c-g43g`, `CVE-2026-113798` · npm `electron`: affected `<42.11.9 || >=43.0.0-alpha.1, <43.7.6 || >=44.0.0-alpha.1, <44.5.0 || >=45.0.0-alpha.1, <45.0.0-alpha.13`, fixed in `42.11.9`, `43.7.6`, `44.5.0`, `45.0.0-alpha.13` · CVSS 5.4 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-346
- [Electron: openExternal permission requests can be attributed to the wrong origin](https://agentprime.io/advisories/GHSA-997q-gvvc-jwmx.md)
  `GHSA-997q-gvvc-jwmx`, `CVE-2026-114121` · npm `electron`: affected `<42.11.3 || >=43.0.0-alpha.1, <43.7.0 || >=44.0.0-alpha.1, <44.3.0 || >=45.0.0-alpha.1, <45.0.0-alpha.5`, fixed in `42.11.3`, `43.7.0`, `44.3.0`, `45.0.0-alpha.5` · CVSS 5.4 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-346
- [webpack-dev-server vulnerable to cross-origin WebSocket access via proxied upgrades](https://agentprime.io/advisories/CVE-2026-112085.md)
  `CVE-2026-112085` · CVE record: webpack-dev-server webpack-dev-server · CVSS 8.2 High · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-346, CWE-1385
- [Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites](https://agentprime.io/advisories/GHSA-f2ph-cmg5-wxc8.md)
  `GHSA-f2ph-cmg5-wxc8`, `CVE-2026-114125` · npm `storybook` and 5 more: affected `>=8.0.0, <8.6.19 || >=9.0.0, <9.1.21 || >=10.0.0, <10.6.2 || >=11.0.0-alpha.0, <11.0.0-alpha.6`, fixed in `8.6.19`, `9.1.21`, `10.6.2`, `11.0.0-alpha.6` · CVSS 8.6 High · Not analysed yet · Published 21 Oct 2026 · Tags: Path traversal, Code injection, Broken access control, CWE-346
- [Electron: HID and USB permission checks can be attributed to the wrong origin](https://agentprime.io/advisories/GHSA-fw47-9c62-h3vw.md)
  `GHSA-fw47-9c62-h3vw`, `CVE-2026-113800` · npm `electron`: affected `<42.11.3 || >=43.0.0-alpha.1, <43.7.0 || >=44.0.0-alpha.1, <44.3.0 || >=45.0.0-alpha.1, <45.0.0-alpha.5`, fixed in `42.11.3`, `43.7.0`, `44.3.0`, `45.0.0-alpha.5` · CVSS 5.4 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-113075.md)
  `CVE-2026-113075` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-346
- [CCC Attestation SIG attested-tls-poc through commit 731ca82 Attestation Relay Attack](https://agentprime.io/advisories/CVE-2026-112377.md)
  `CVE-2026-112377` · CVE record: CCC-Attestation attested-tls-poc · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Oct 2026 · Tags: CWE-346
- [LoopX serve-status permissive CORS policy exposes control-plane state and private Markdown files](https://agentprime.io/advisories/GHSA-vx2m-gpq4-8j5q.md)
  `GHSA-vx2m-gpq4-8j5q`, `CVE-2026-108372` · PyPI `loopx`: affected `>=0.0.1, <0.4.5`, fixed in `0.4.5` · CVSS 7.1 High · Not analysed yet · Published 19 Oct 2026 · Tags: CWE-346, CWE-942
- [BlackBeltTechnology pi-agent-dashboard WebSocket Gateway origin validation](https://agentprime.io/advisories/CVE-2026-112101.md)
  `CVE-2026-112101` · CVE record: BlackBeltTechnology pi-agent-dashboard · CVSS 5.3 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: CWE-345, CWE-346
- [Scoold: CORS wildcard origin with credentials enabled allows cross-origin authenticated API access from any domain](https://agentprime.io/advisories/CVE-2026-55842.md)
  `CVE-2026-55842` · CVE record: Erudika scoold · CVSS 5.4 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-346, CWE-942
- [AliasVault: Browser extension WebAuthn bridge accepts forged origin/RP ID](https://agentprime.io/advisories/CVE-2026-55587.md)
  `CVE-2026-55587` · CVE record: aliasvault aliasvault · CVSS 8.1 High · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-346
- [Angular DevTools (Local DoS)](https://agentprime.io/advisories/CVE-2026-101897.md)
  `CVE-2026-101897` · CVE record: angular angular and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-346, CWE-441, CWE-940
- [Legacy Update ActiveX control accepts unauthorized hosting origins](https://agentprime.io/advisories/CVE-2026-97381.md)
  `CVE-2026-97381` · CVE record: LegacyUpdate LegacyUpdate · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-346, CWE-393
- [Microsoft Security Advisory CVE-2026-96234 - .NET and Visual Studio Information Disclosure Vulnerability](https://agentprime.io/advisories/GHSA-fq6x-pvr9-888r.md)
  `GHSA-fq6x-pvr9-888r`, `CVE-2026-96234` · NuGet `Microsoft.WindowsDesktop.App.Runtime.win-arm64` and 2 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-346
- [.NET Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-96238.md)
  `CVE-2026-96238` · CVE record: Microsoft .NET 10.0 runtime and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-346
- [Azure Key Vault Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-88132.md)
  `CVE-2026-88132` · CVE record: Microsoft azure-keyvault-administration and 3 more · CVSS 5.9 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-346
- [Microsoft Power Apps Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-70213.md)
  `CVE-2026-70213` · CVE record: Microsoft Microsoft Power Apps for Android · CVSS 8.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-346
- [Azure DevOps Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69877.md)
  `CVE-2026-69877` · CVE record: Microsoft Azure CLI and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-346
- [Same-origin policy bypass in the DevTools component](https://agentprime.io/advisories/CVE-2026-109772.md)
  `CVE-2026-109772` · CVE record: Mozilla Firefox and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-346
- [Site isolation issue in the Networking component](https://agentprime.io/advisories/CVE-2026-109759.md)
  `CVE-2026-109759` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-346
- [Saved credentials can be autofilled after cross-origin navigation](https://agentprime.io/advisories/CVE-2026-103417.md)
  `CVE-2026-103417` · CVE record: Mozilla Firefox for iOS · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-346

Older: <https://agentprime.io/advisories/tag/cwe-346.md?cursor=WyIyMDI2LTEwLTEzVDA3OjE5OjEwLjQ1NDAwMFoiLCJDVkUtMjAyNi0xMDM0MTciXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-346>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-346/>. Everything for agents: <https://agentprime.io/llms.txt>.