CWE-346.

Privasys attested TLS accepted evidence from any unrevoked TEE platform (diversion attack)

• Privasys ra-tls-clients
• CWE-346

Network-AI before 5.15.2 CORS Origin Validation Error in MCP SSE Transport

• Jovancoding Network-AI
• CWE-346

Open WebUI 0.7.0 before 0.11.4 Session Token Theft via SyncStatsModal

• open-webui
• CWE-346

Insufficient isolation of user-supplied code in Progress MarkLogic Server

• Progress Software Corporation MarkLogic Server
• CWE-346

ra-tls-clients: RA-TLS challenge verifier accepted quotes not bound to the TLS session

• Privasys ra-tls-clients
• CWE-346

enclave-os-virtual: RA-TLS challenge certificates were not bound to the TLS session

• Privasys enclave-os-virtual
• CWE-346

Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session

• Privasys go
• CWE-346

Privasys rustls fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session

• Privasys rustls
• CWE-346

Nginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared login lockout

• CWE-346

>=1.9.10-0.20251005005631-6de168c9454, <1.9.10-0.20260904075558-e30e331303fc · fixed in 1.9.10-0.20260904075558-e30e331303fc

TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment

• Open redirect
• CWE-346

<3.14.0 · fixed in 3.14.0

enclave-os-mini: RA-TLS challenge certificates were not bound to the TLS session

• Privasys enclave-os-mini
• CWE-346

PraisonAI: Call API localhost-only authentication bypass via spoofed Host header

• Authentication bypass
• CWE-346

<4.6.78 · fixed in 4.6.78

Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): the local chat endpoint does not validate the `Host` header

• CWE-346
• CWE-350

>=1.34.0, <1.107.5 || >=2.0.0b1, <2.30.0 · fixed in 1.107.5, 2.30.0

Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): a website visited by the developer can trigger agent runs and server-side tool execution on the local chat endpoint

• Cross-site request forgery (CSRF)
• CWE-346

>=1.34.0, <1.107.4 || >=2.0.0b1, <2.28.0 · fixed in 1.107.4, 2.28.0

AsyncHttpClient: Pooled connections can still be shared across NTLM, Negotiate and proxy logins

• Broken access control
• CWE-346

>=3.0.0, <3.0.14 || >=2.0.0, <=2.16.1 · fixed in 3.0.14

Origin Validation Error in hMailServer

• Progressive Robot Ltd hMailServer
• CWE-346

Origin validation error in Eclipse Ditto Ditto Explorer UI

• Eclipse Ditto Ditto Explorer UI
• Hard-coded credentials
• CWE-15

AsyncHttpClient: Connection pool key omits the authenticated principal, so an NTLM or Negotiate connection is reused across identities

• AsyncHttpClient async-http-client
• Broken access control
• CWE-346

Next.js has information disclosure in development server's Model Context Protocol endpoint

• CWE-346

>=16.0.0, <16.3.8 · fixed in 16.3.8

Next.js has information disclosure in App Router metadata image routes via dynamicParams bypass

• CWE-346

>=16.0.0, <16.3.8 · fixed in 16.3.8

Payload external upload trust validation issue

• Information disclosure
• CWE-346

>=3.0.0, <3.90.0 || >=4.0.0-canary.0, <4.0.0-canary.34 · fixed in 3.90.0, 4.0.0-canary.34

Authenticated SMTP Sender Address Forgery

• OVHcloud
• Authentication bypass
• CWE-346

Gitea migration SSRF through ALLOWED_DOMAINS address check bypass

• Gitea
• CWE-346

Joplin Web Clipper pairing allows cross-origin theft of a permanent API token

• laurent22 joplin
• Cross-site request forgery (CSRF)
• CWE-346

Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path

• CWE-346
• CWE-441

>=6.0.0, <6.2.2 || >=7.0.0, <7.6.9 || >=8.5.0, <8.5.1 || >=8.3.5, <8.4.3 || >=8.0.0, <=8.3.4 · fixed in 6.2.2, 7.6.9, 8.5.1, 8.4.3

Heym before v0.0.112 HITL Review Token Leak via Spoofable Origin Header

• heym
• CWE-346

SiYuan: Cross-Site WebSocket Hijacking on the admin-only network proxy endpoint (`/ws/network/proxy`) via explicit `CheckOrigin: true` bypass

• Cross-site request forgery (CSRF)
• Server-side request forgery (SSRF)

<0.0.0-20260803045322-cb67e0b4fab5 · fixed in 0.0.0-20260803045322-cb67e0b4fab5

CVE-2026-104056

• Authlib
• CWE-345
• CWE-346

Moodle: csrf in xml grade import

• CWE-346

mcp-chrome-bridge through 1.0.31 CORS Origin Bypass

• hangwin mcp-chrome-bridge
• CWE-346

undici vulnerable to cross-origin cache poisoning via missing origin isolation in interceptors

• CWE-346

>=8.10.0, <8.10.2 · fixed in 8.10.2

Electron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTab

• CWE-346
• CWE-693

<41.10.4 || >=42.0.0-alpha.1, <42.5.2 || >=43.0.0-alpha.1, <43.0.0 · fixed in 41.10.4, 42.5.2, 43.0.0

Electron: File and HTTP protocol handlers allow cross-origin reads without corsEnabled

• CWE-346

<41.10.6 || >=42.0.0-alpha.1, <42.9.2 || >=43.0.0-alpha.1, <43.4.1 || >=44.0.0-alpha.1, <44.0.0-beta.5 · fixed in 41.10.6, 42.9.2, 43.4.1, 44.0.0-beta.5

Mitigation bypass in the DOM: Navigation component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-346

Site isolation issue in the Panning and Zooming component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-346

Site isolation issue in the DOM: Networking component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-346

Same-origin policy bypass in the DevTools component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-346

Same-origin policy bypass in the WebExtensions component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-346

Trusted Domain Project OpenDMARC PSL Wildcard opendmarc_tld.c : opendmarc_get_tld origin validation

• Trusted Domain Project OpenDMARC
• CWE-345
• CWE-346

Origin validation error in the connect-xcors npm package

• github.com/antono connect-cors
• CWE-346

SiYuan before v3.8.4 Authentication Bypass via Missing Origin Header

• siyuan
• CWE-346

SiYuan v2.1.0 before v3.8.4 Cross-Site Request Forgery via CheckAuth

• siyuan
• CWE-346

OpenClaw before 2026.7.1 Approval Binding Logic Error

• OpenClaw
• CWE-346

Cline: Cross-Origin WebSocket Hijacking in Cline Hub Dashboard (`/browser` endpoint)

• CWE-346

<3.0.30 · fixed in 3.0.30

DBHub HTTP transport DNS rebinding allows unauthenticated browser-origin SQL execution

• Authentication bypass
• CWE-346

<0.22.5 · fixed in 0.22.5

Discourse: Wildcard iframe origin allowlist bypass via authority separators

• discourse
• CWE-346

YOP Poll <= 7.0.10 - Unauthenticated Origin Validation Error to Administrator Account Takeover via '/auth/wp-login-redirect' REST Route

• yourownprogrammer YOP Poll
• CWE-346

Origin validation error in Fabasoft Folio Client

• Fabasoft Folio Client
• CWE-346

Apache Sling Security Bundle: RefererFilter accepts weaker-than-origin evidence

• Apache Software Foundation Apache Sling Security Bundle
• CWE-346

Dark Reader: Ability to request icon-like bitmap data from certain local web servers

• darkreader
• Information disclosure
• CWE-346

Tencent BrowserSkill through 0.3.0 Origin Validation Error in Local WebSocket Daemon

• Tencent BrowserSkill
• CWE-346

Process Compose: Browser DNS rebinding lets websites control local process-compose MCP tools

• Authentication bypass
• CWE-346

<1.120.0 · fixed in 1.120.0

Cocos AI: Intra-handshake attested TLS implementation is vulnerable to session-misbinding attacks for Intel TDX verifier path

• ultravioletrs cocos
• CWE-346
• CWE-354

Cocos AI: Intra-handshake attested TLS implementation can accept Evidence with nil, empty, or omitted reportData in the AMD SEV-SNP path

• ultravioletrs cocos
• CWE-346

Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config

• Red Hat
• Red Hat Build of Apache Camel 3.33.4.redhat
• CWE-346
• CWE-942

Grav: Origin validation bypass in Uri::referrer() and Pages::referrerRoute() via unanchored prefix match

• CWE-346

<2.0.16 · fixed in 2.0.16

Mattermost Desktop App Missing IPC Sender Validation in Calls Leave Handler

• Mattermost
• CWE-346

Mattermost Desktop local network access from server-rendered content

• Mattermost
• CWE-346

NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets

• ISC BIND 9
• CWE-346

ag-ui-protocol ag-ui Event Application Layer agent.ts prepareRunAgentInput origin validation

• ag-ui
• CWE-345
• CWE-346