# CWE-346.

Every Advisory and CVE whose sources give the weakness CWE-346, newest first.

## Records, newest first (an older page)

- [Mattermost Desktop local network access from server-rendered content](https://agentprime.io/advisories/CVE-2026-75025.md)
  `CVE-2026-75025` · CVE record: Mattermost Mattermost · CVSS 4.7 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-346
- [NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets](https://agentprime.io/advisories/CVE-2026-77119.md)
  `CVE-2026-77119` · CVE record: ISC BIND 9 · CVSS 5.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-346
- [ag-ui-protocol ag-ui Event Application Layer agent.ts prepareRunAgentInput origin validation](https://agentprime.io/advisories/CVE-2026-92360.md)
  `CVE-2026-92360` · CVE record: ag-ui-protocol ag-ui · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-345, CWE-346
- [ag-ui-protocol ag-ui CORSMiddleware utils.py create_strands_app cross-domain policy](https://agentprime.io/advisories/CVE-2026-92359.md)
  `CVE-2026-92359` · CVE record: ag-ui-protocol ag-ui · CVSS 2.3 Low · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-346, CWE-942
- [Apache Airflow FAB provider: FAB Authentik provider: id_token issuer/audience not validated](https://agentprime.io/advisories/CVE-2026-86466.md)
  `CVE-2026-86466` · CVE record: Apache Software Foundation Apache Airflow FAB provider · CVSS 8.1 High · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-346
- [Site isolation issue in the Reader Mode component](https://agentprime.io/advisories/CVE-2026-92068.md)
  `CVE-2026-92068` · CVE record: Mozilla Firefox and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-346
- [Site isolation issue in the Graphics component](https://agentprime.io/advisories/CVE-2026-92034.md)
  `CVE-2026-92034` · CVE record: Mozilla Firefox and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-346
- [DocsGPT through 0.20.0 OAuth Token Disclosure via Wildcard postMessage](https://agentprime.io/advisories/CVE-2026-91201.md)
  `CVE-2026-91201` · CVE record: arc53 DocsGPT · CVSS 5.3 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: CWE-346
- [Apache Storm Webapp: Authenticated API Responses Exposed to Arbitrary Web Origins](https://agentprime.io/advisories/CVE-2026-82438.md)
  `CVE-2026-82438` · CVE record: Apache Software Foundation Apache Storm Webapp · CVSS 8.1 High · Not analysed yet · Published 14 Sept 2026 · Tags: CWE-346, CWE-942
- [Origin validation error in Samsung Exynos 1080 firmware](https://agentprime.io/advisories/CVE-2026-23792.md)
  `CVE-2026-23792` · CVE record: Samsung Exynos 1080 firmware · CVSS 4.0 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: CWE-346
- [Mousehole: Unauthenticated HTTP/WebSocket boundary exposes and mutates MAM cookie state](https://agentprime.io/advisories/CVE-2026-50025.md)
  `CVE-2026-50025` · CVE record: t-mart mousehole · CVSS 6.9 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: Information disclosure, Authentication bypass, Cross-site request forgery (CSRF), Broken access control
- [MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)](https://agentprime.io/advisories/GHSA-rqfv-2mw9-78g2.md)
  `GHSA-rqfv-2mw9-78g2`, `CVE-2026-59971`, `PYSEC-2026-4109` · PyPI `mysql-mcp-server`: affected `<0.4.2`, fixed in `0.4.2` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026 · Tags: Authentication bypass, CWE-346
- [An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA sel…](https://agentprime.io/advisories/CVE-2026-78807.md)
  `CVE-2026-78807` · CVE record · CVSS 7.1 High · Not analysed yet · Published 11 Sept 2026 · Tags: CWE-346
- [Origin validation error in Google Chrome](https://agentprime.io/advisories/CVE-2026-87563.md)
  `CVE-2026-87563` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-346
- [.NET Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-58649.md)
  `CVE-2026-58649` · CVE record: Microsoft .NET 10.0 runtime and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-346
- [Microsoft Teams for Android Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69559.md)
  `CVE-2026-69559` · CVE record: Microsoft Microsoft Teams for Android · CVSS 5.8 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-346
- [Windows DNS Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-69680.md)
  `CVE-2026-69680` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-346
- [Apache Airflow FAB provider: FAB Azure AD OAuth: id_token issuer/audience not validated — cross-tenant authentication bypass](https://agentprime.io/advisories/CVE-2026-75156.md)
  `CVE-2026-75156` · CVE record: Apache Software Foundation Apache Airflow FAB provider · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-346
- [WWBN AVideo Cross-Site Request Forgery via get_domain() validation](https://agentprime.io/advisories/CVE-2026-84482.md)
  `CVE-2026-84482` · CVE record: WWBN AVideo · CVSS 8.7 High · Not analysed yet · Published 1 Sept 2026 · Tags: CWE-346
- [TYPO3 CMS - Broken Access Control in Backend and Install Tool](https://agentprime.io/advisories/GHSA-68jx-f42c-7599.md)
  `GHSA-68jx-f42c-7599`, `CVE-2026-19418`, `PKSA-hf64-fs5s-6k3h`, `PKSA-nmd9-kc7m-nsvr` · Packagist `typo3/cms-backend` and 1 more: affected `>=13.0.0, <13.4.34`, fixed in `13.4.34` · CVSS 7.3 High · Not analysed yet · Published 1 Sept 2026 · Tags: Cross-site request forgery (CSRF), CWE-346
- [Site isolation issue in the DOM: Navigation component](https://agentprime.io/advisories/CVE-2026-84140.md)
  `CVE-2026-84140` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2026 · Tags: CWE-346
- [Site isolation issue in the DOM: Push Subscriptions component](https://agentprime.io/advisories/CVE-2026-84133.md)
  `CVE-2026-84133` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2026 · Tags: CWE-346
- [Site isolation issue in the DOM: Navigation component](https://agentprime.io/advisories/CVE-2026-84129.md)
  `CVE-2026-84129` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2026 · Tags: CWE-346
- [Toggl OÜ Toggl Track Extension postMessage origin validation](https://agentprime.io/advisories/CVE-2026-82811.md)
  `CVE-2026-82811` · CVE record: Toggl OÜ Toggl Track Extension · CVSS 5.3 Medium · Not analysed yet · Published 31 Aug 2026 · Tags: CWE-345, CWE-346
- [MCP DNS-rebinding origin check in AshAi is bypassed by a spoofed X-Forwarded-Proto header](https://agentprime.io/advisories/GHSA-c92r-f3rr-q49h.md)
  `GHSA-c92r-f3rr-q49h`, `CVE-2026-81315`, `EEF-CVE-2026-81315` · Hex `ash_ai`: affected `>=0.8.0, <1.0.0`, fixed in `1.0.0` · CVSS 7.4 High · Not analysed yet · Published 31 Aug 2026 · Tags: CWE-346
- [Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-70309.md)
  `CVE-2026-70309` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 5.4 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: CWE-346
- [Spring Cloud Function can incorrectly determine if URI is secure](https://agentprime.io/advisories/CVE-2026-59297.md)
  `CVE-2026-59297` · CVE record: Spring Spring Cloud Function · CVSS 3.1 Low · Not analysed yet · Published 27 Aug 2026 · Tags: CWE-346
- [Dropbox Dash MCP Server DNS Rebinding via Missing Host Header Validation](https://agentprime.io/advisories/CVE-2026-81102.md)
  `CVE-2026-81102` · CVE record: dropbox mcp-server-dash · CVSS 2.3 Low · Not analysed yet · Published 27 Aug 2026 · Tags: CWE-346
- [Timescale tiger-gh-mcp-server DNS Rebinding via Disabled Host Header Allow-List](https://agentprime.io/advisories/CVE-2026-81100.md)
  `CVE-2026-81100` · CVE record: timescale tiger-gh-mcp-server · CVSS 7.6 High · Not analysed yet · Published 27 Aug 2026 · Tags: CWE-346
- [Timescale tiger-slack DNS Rebinding via Disabled Host Header Allow-List](https://agentprime.io/advisories/CVE-2026-81099.md)
  `CVE-2026-81099` · CVE record: timescale tiger-slack · CVSS 7.6 High · Not analysed yet · Published 27 Aug 2026 · Tags: CWE-346
- [Timescale pg-aiguide through 0.5.0 DNS Rebinding via Disabled Host Header Allow-List](https://agentprime.io/advisories/CVE-2026-81095.md)
  `CVE-2026-81095` · CVE record: timescale pg-aiguide · CVSS 7.6 High · Not analysed yet · Published 27 Aug 2026 · Tags: CWE-346
- [mcp-go before 0.56.0 Missing Host Header Validation Enables DNS Rebinding](https://agentprime.io/advisories/CVE-2026-81092.md)
  `CVE-2026-81092` · CVE record: mark3labs mcp-go · CVSS 7.6 High · Not analysed yet · Published 27 Aug 2026 · Tags: CWE-346
- [genieacs-mcp: DNS rebinding reaches local GenieACS MCP Streamable HTTP transport](https://agentprime.io/advisories/GHSA-cmwv-wf9p-p8wx.md)
  `GHSA-cmwv-wf9p-p8wx`, `CVE-2026-55637`, `GO-2026-6295` · Go `github.com/geiserx/genieacs-mcp`: affected `<0.3.2`, fixed in `0.3.2` · CVSS 8.8 High · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-346
- [PraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery against the PraisonAI MCP HTTP server](https://agentprime.io/advisories/GHSA-pvph-5j39-v8qc.md)
  `GHSA-pvph-5j39-v8qc`, `CVE-2026-55532`, `PYSEC-2026-3892` · PyPI `praisonai`: affected `<4.6.58`, fixed in `4.6.58` · CVSS 7.6 High · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site request forgery (CSRF), CWE-346
- [PraisonAI has an origin validation bypass in MCP HTTP Stream transport that allows browser-mediated unauthenticated tool execution on local MCP server](https://agentprime.io/advisories/GHSA-wj6g-v78p-6fx3.md)
  `GHSA-wj6g-v78p-6fx3`, `CVE-2026-55529`, `PYSEC-2026-3896` · PyPI `praisonai`: affected `<4.6.58`, fixed in `4.6.58` · CVSS 6.9 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Authentication bypass, CWE-346
- [Duplicate Advisory: Grav: Origin validation bypass in Uri::referrer() and Pages::referrerRoute() via unanchored prefix match](https://agentprime.io/advisories/GHSA-qh7h-6c7g-x8m6.md)
  `GHSA-qh7h-6c7g-x8m6` · Packagist `getgrav/grav`: affected `*`, no fixed version yet · CVSS 5.4 Medium · Withdrawn · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-346
- [FORT-validator Vulnerable to RRDP Shared Snapshot Cache Poisoning](https://agentprime.io/advisories/CVE-2026-53499.md)
  `CVE-2026-53499` · CVE record: NICMx FORT-validator · CVSS 7.2 High · Not analysed yet · Published 21 Aug 2026 · Tags: CWE-346
- [Microsoft UFO: DNS Rebinding → Unauthenticated File Read / Command Execution](https://agentprime.io/advisories/CVE-2026-62316.md)
  `CVE-2026-62316` · CVE record: microsoft UFO · CVSS 8.8 High · Not analysed yet · Published 21 Aug 2026 · Tags: Information disclosure, CWE-346
- [Mailpit: WebSocket origin check bypass via percent-encoded path (regression of CVE-2026-22689)](https://agentprime.io/advisories/GHSA-8r62-w5wh-fc5m.md)
  `GHSA-8r62-w5wh-fc5m`, `CVE-2026-67448`, `GO-2026-6271` · Go `github.com/axllent/mailpit`: affected `>=1.29.0, <1.30.6`, fixed in `1.30.6` · CVSS 6.5 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Information disclosure, CWE-177, CWE-346
- [Site isolation issue in the Audio/Video: Web Codecs component](https://agentprime.io/advisories/CVE-2026-74981.md)
  `CVE-2026-74981` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 18 Aug 2026 · Tags: CWE-346
- [Site isolation issue in the Graphics component](https://agentprime.io/advisories/CVE-2026-74970.md)
  `CVE-2026-74970` · CVE record: Mozilla Firefox and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: CWE-346
- [Site isolation issue in the Graphics: WebRender component](https://agentprime.io/advisories/CVE-2026-74968.md)
  `CVE-2026-74968` · CVE record: Mozilla Firefox and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: CWE-346
- [Same-origin policy bypass in the Graphics: ImageLib component](https://agentprime.io/advisories/CVE-2026-74974.md)
  `CVE-2026-74974` · CVE record: Mozilla Firefox and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: CWE-346
- [Same-origin policy bypass in the Audio/Video: Playback component](https://agentprime.io/advisories/CVE-2026-74967.md)
  `CVE-2026-74967` · CVE record: Mozilla Firefox and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: CWE-346
- [Same-origin policy bypass in the Networking: Cookies component](https://agentprime.io/advisories/CVE-2026-74963.md)
  `CVE-2026-74963` · CVE record: Mozilla Firefox and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: CWE-346
- [Site isolation issue in the Networking: Cookies component](https://agentprime.io/advisories/CVE-2026-74962.md)
  `CVE-2026-74962` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 18 Aug 2026 · Tags: CWE-346
- [Site isolation issue in the WebExtensions component](https://agentprime.io/advisories/CVE-2026-74960.md)
  `CVE-2026-74960` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 18 Aug 2026 · Tags: Broken access control, CWE-346
- [Site isolation issue in the Graphics: CanvasWebGL component](https://agentprime.io/advisories/CVE-2026-74934.md)
  `CVE-2026-74934` · CVE record: Mozilla Firefox and 1 more · CVSS 7.5 High · Not analysed yet · Published 18 Aug 2026 · Tags: Information disclosure, Broken access control, CWE-346
- [Duplicate Advisory: SiYuan: Cross-Site WebSocket Hijacking on the admin-only network proxy endpoint (\`/ws/network/proxy\`) via explicit \`CheckOrigin: true\` bypass](https://agentprime.io/advisories/GHSA-x8p6-569w-fmmr.md)
  `GHSA-x8p6-569w-fmmr` · Go `github.com/siyuan-note/siyuan/kernel`: affected `*`, no fixed version yet · CVSS 8.2 High · Withdrawn · Not analysed yet · Published 17 Aug 2026 · Tags: CWE-346
- [Referer Validation Bypass in TL-WR820N Web Management Interface](https://agentprime.io/advisories/CVE-2026-15141.md)
  `CVE-2026-15141` · CVE record: TP-Link Systems Inc. TL-WR820N v2 · CVSS 5.3 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: CWE-346
- [IBM i is Affected By Multiple Vulnerabilities in Navigator for i](https://agentprime.io/advisories/CVE-2026-18847.md)
  `CVE-2026-18847` · CVE record: IBM i · CVSS 8.8 High · Not analysed yet · Published 12 Aug 2026 · Tags: CWE-346
- [IBM i is Affected By XML injection flaw in Navigator for i](https://agentprime.io/advisories/CVE-2026-18098.md)
  `CVE-2026-18098` · CVE record: IBM i · CVSS 8.1 High · Not analysed yet · Published 12 Aug 2026 · Tags: CWE-346
- [Windows Network Address Translation (NAT) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-56179.md)
  `CVE-2026-56179` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 8.3 High · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-346
- [Duplicate Advisory: TYPO3-CORE-SA-2026-021: Broken Access Control in Backend and Install Tool](https://agentprime.io/advisories/GHSA-4f2f-jr2m-j7p4.md)
  `GHSA-4f2f-jr2m-j7p4` · Packagist `typo3/cms-core`: affected `>=13.0.0, <13.4.34 || >=14.0.0, <14.3.6`, fixed in `13.4.34`, `14.3.6` · CVSS 4.0, no score published · Withdrawn · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-346
- [OpenYak local API: unauthenticated CSRF chain leads to Remote Code Execution](https://agentprime.io/advisories/CVE-2026-46409.md)
  `CVE-2026-46409` · CVE record: openyak openyak · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Aug 2026 · Tags: Code injection, Authentication bypass, Cross-site request forgery (CSRF), CWE-346
- [Frappe: Host header poisoning can redirect magic login links to an attacker-controlled domain](https://agentprime.io/advisories/CVE-2026-47194.md)
  `CVE-2026-47194` · CVE record: frappe frappe · CVSS 8.6 High · Not analysed yet · Published 6 Aug 2026 · Tags: CWE-346
- [Sonic 3 A.I.R. Missing Source Address Validation in ConnectionManager](https://agentprime.io/advisories/CVE-2026-66732.md)
  `CVE-2026-66732` · CVE record: Eukaryot sonic3air · CVSS 8.3 High · Not analysed yet · Published 6 Aug 2026 · Tags: CWE-346
- [JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shortcuts](https://agentprime.io/advisories/GHSA-68c2-prqg-x62g.md)
  `GHSA-68c2-prqg-x62g`, `CVE-2026-66298`, `EEF-CVE-2026-66298` · Hex `livebook`: affected `>=0.5.0, <0.18.7 || >=0.19.0, <0.19.9`, fixed in `0.18.7`, `0.19.9` · CVSS 8.6 High · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-346
- [Electron: Permission Check Handler Receives Main Frame Origin Instead of Requesting Iframe Origin](https://agentprime.io/advisories/GHSA-9pf5-hg6p-4pwp.md)
  `GHSA-9pf5-hg6p-4pwp`, `CVE-2026-70599` · npm `electron`: affected `<39.8.7 || >=40.0.0-alpha.1, <40.9.0 || >=41.0.0-alpha.1, <41.2.0 || >=42.0.0-alpha.1, <42.0.0-beta.1`, fixed in `39.8.7`, `40.9.0`, `41.2.0`, `42.0.0-beta.1` · CVSS 5.9 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-346
- [Keycloak-services: keycloak-services: saml idp-initiated broker login bypasses link-only restriction](https://agentprime.io/advisories/CVE-2026-16442.md)
  `CVE-2026-16442` · CVE record: Red Hat Red Hat build of Keycloak 26.4 and 4 more · CVSS 7.4 High · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-346

Newest: <https://agentprime.io/advisories/tag/cwe-346.md>
Older: <https://agentprime.io/advisories/tag/cwe-346.md?cursor=WyIyMDI2LTA4LTA1VDE1OjAwOjM5LjIzNjAwMFoiLCJDVkUtMjAyNi0xNjQ0MiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-346&cursor=WyIyMDI2LTA5LTE3VDE1OjExOjUyLjI5NzAwMFoiLCJDVkUtMjAyNi0xMjI4NCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-346/?cursor=WyIyMDI2LTA5LTE3VDE1OjExOjUyLjI5NzAwMFoiLCJDVkUtMjAyNi0xMjI4NCJd>. Everything for agents: <https://agentprime.io/llms.txt>.