# CWE-350.

Every Advisory and CVE whose sources give the weakness CWE-350, newest first.

## Records, newest first

- [SharpEmu: Cross-site request forgery in the debugger frontend leads to arbitrary process execution](https://agentprime.io/advisories/CVE-2026-92704.md)
  `CVE-2026-92704` · CVE record: sharpemu sharpemu · CVSS 8.3 High · Not analysed yet · Published 4 Nov 2026 · Tags: Authentication bypass, Cross-site request forgery (CSRF), CWE-346, CWE-350
- [AnkiMCP: DNS rebinding reaches unauthenticated local AnkiMCP HTTP tools](https://agentprime.io/advisories/CVE-2026-61546.md)
  `CVE-2026-61546` · CVE record: ankimcp anki-mcp-server-addon · CVSS 8.8 High · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-346, CWE-350
- [Pydantic AI Web chat UI (\`Agent.to_web()\`, \`clai web\`): the local chat endpoint does not validate the \`Host\` header](https://agentprime.io/advisories/GHSA-q2xc-rrxj-58x9.md)
  `GHSA-q2xc-rrxj-58x9`, `CVE-2026-107292`, `PYSEC-2026-4279`, `PYSEC-2026-4288` · PyPI `pydantic-ai` and 1 more: affected `>=1.34.0, <1.107.5 || >=2.0.0b1, <2.30.0`, fixed in `1.107.5`, `2.30.0` · CVSS 6.4 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: CWE-346, CWE-350
- [Chartbrew: DNS Rebinding SSRF Bypass in Outbound Request Validation](https://agentprime.io/advisories/CVE-2026-61743.md)
  `CVE-2026-61743` · CVE record: chartbrew chartbrew · CVSS 6.3 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: CWE-350
- [@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport](https://agentprime.io/advisories/GHSA-vmp7-252j-cwp7.md)
  `GHSA-vmp7-252j-cwp7`, `CVE-2026-61568` · npm `@zereight/mcp-gitlab`: affected `<2.1.30`, fixed in `2.1.30` · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-350
- [praisonaiagents has an SSRF protection bypass in \`spider_tools.\_host_is_blocked()\` via DNS-resolved hostnames (\`127.0.0.1.nip.io\`)](https://agentprime.io/advisories/GHSA-x44h-65qv-cw74.md)
  `GHSA-x44h-65qv-cw74`, `CVE-2026-55526`, `PYSEC-2026-3905` · PyPI `praisonaiagents`: affected `<1.6.58`, fixed in `1.6.58` · CVSS 8.5 High · Not analysed yet · Published 25 Aug 2026 · Tags: Server-side request forgery (SSRF), CWE-350
- [Grav before 3.9.2 Host Header Injection via sendInvitationEmail](https://agentprime.io/advisories/CVE-2026-56709.md)
  `CVE-2026-56709` · CVE record: getgrav grav · CVSS 8.7 High · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-350
- [BunkerWeb: rDNS bypass via missing forward-confirmation (FCrDNS) in blacklist, greylist, and antibot](https://agentprime.io/advisories/CVE-2026-75514.md)
  `CVE-2026-75514` · CVE record: bunkerity bunkerweb · CVSS 5.9 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-350
- [ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (\`/admin/gateways/test\`)](https://agentprime.io/advisories/GHSA-9hgc-g3w5-67cm.md)
  `GHSA-9hgc-g3w5-67cm`, `CVE-2026-53708`, `PYSEC-2026-3684` · PyPI `mcp-contextforge-gateway`: affected `<1.0.3`, fixed in `1.0.3` · CVSS 6.6 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Race condition, Server-side request forgery (SSRF), CWE-350
- [MCP Ruby SDK: Streamable HTTP transport lacks DNS-rebinding (Host/Origin) protection](https://agentprime.io/advisories/GHSA-rjr6-rcgv-9m7m.md)
  `GHSA-rjr6-rcgv-9m7m`, `CVE-2026-63118` · RubyGems `mcp`: affected `<0.23.0`, fixed in `0.23.0` · CVSS 6.9 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-346, CWE-350
- [datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding](https://agentprime.io/advisories/GHSA-vx7x-vcc2-c44g.md)
  `GHSA-vx7x-vcc2-c44g`, `CVE-2026-55391`, `PYSEC-2026-3565` · PyPI `datamodel-code-generator`: affected `<0.63.0`, fixed in `0.63.0` · CVSS 7.5 High · Not analysed yet · Published 28 Jul 2026 · Tags: Race condition, Server-side request forgery (SSRF), CWE-350
- [Reliance on Reverse DNS Resolution for a Security-Critical Action in GitLab](https://agentprime.io/advisories/CVE-2026-12635.md)
  `CVE-2026-12635` · CVE record: GitLab GitLab · CVSS 0.0 None · Not analysed yet · Published 25 Jun 2026 · Tags: CWE-350
- [Glances: XML-RPC Server Missing Host Header Validation Enables DNS Rebinding Attack](https://agentprime.io/advisories/GHSA-w856-8p3r-p338.md)
  `GHSA-w856-8p3r-p338`, `CVE-2026-46611`, `PYSEC-2026-2498` · PyPI `glances`: affected `<4.5.5`, fixed in `4.5.5` · CVSS 5.3 Medium · Not analysed yet · Published 22 Jun 2026 · Tags: CWE-346, CWE-350
- [PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in](https://agentprime.io/advisories/GHSA-x227-pf99-vffg.md)
  `GHSA-x227-pf99-vffg`, `CVE-2026-57123`, `PYSEC-2026-3536` · PyPI `praisonaiagents`: affected `<1.6.59`, fixed in `1.6.59` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Jun 2026 · Tags: Authentication bypass, CWE-350, CWE-1327
- [Mercusys AC12G (EU) V1 router with firmware AC12G(EU)\_V1_200909 does not validate the HTTP Host header, enabling DNS rebinding attacks.](https://agentprime.io/advisories/CVE-2026-36604.md)
  `CVE-2026-36604` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 3 Jun 2026 · Tags: CWE-350
- [Rojo development server vulnerable to DNS rebinding, allowing unauthenticated read/write access and local program execution](https://agentprime.io/advisories/RUSTSEC-2026-0279.md)
  `RUSTSEC-2026-0279`, `CVE-2026-97875` · crates.io `rojo`: affected `>=0.0.0-0, <7.7.0`, fixed in `7.7.0` · CVSS 8.1 High · Not analysed yet · Published 2 Jun 2026 · Tags: CWE-350
- [DNS rebinding vulnerability in rmcp Streamable HTTP server transport](https://agentprime.io/advisories/GHSA-fvh2-gm75-j4j7.md)
  `GHSA-fvh2-gm75-j4j7`, `CVE-2026-42559`, `GHSA-89vp-x53w-74fx`, `RUSTSEC-2026-0140`, `RUSTSEC-2026-0189` · crates.io `rmcp`: affected `>=0.0.0-0, <1.4.0`, fixed in `1.4.0` · CVSS 8.8 High · Not analysed yet · Published 29 Apr 2026 · Tags: CWE-346, CWE-350
- [copilot-api has Reliance on Reverse DNS Resolution for a Security-Critical Action](https://agentprime.io/advisories/GHSA-3vr4-cvmg-7fx4.md)
  `GHSA-3vr4-cvmg-7fx4`, `CVE-2026-6874` · npm `copilot-api`: affected `<=0.7.0`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 23 Apr 2026 · Tags: CWE-350
- [OpenClaw: Browser SSRF hostname validation could be bypassed by DNS rebinding](https://agentprime.io/advisories/GHSA-xq94-r468-qwgj.md)
  `GHSA-xq94-r468-qwgj`, `CVE-2026-43582` · npm `openclaw`: affected `<2026.4.10`, fixed in `2026.4.10` · CVSS 4.9 Medium · Not analysed yet · Published 17 Apr 2026 · Tags: Race condition, Server-side request forgery (SSRF), CWE-350
- [OpenClaw: macOS Tailnet DNS Spoofing & Credential Exfiltration](https://agentprime.io/advisories/GHSA-q9w8-cf67-r238.md)
  `GHSA-q9w8-cf67-r238`, `CVE-2026-41393` · npm `openclaw`: affected `<2026.3.31`, fixed in `2026.3.31` · CVSS 5.9 Medium · Not analysed yet · Published 3 Apr 2026 · Tags: CWE-346, CWE-350
- [Jenkins has a DNS rebinding vulnerability in WebSocket CLI origin validation](https://agentprime.io/advisories/GHSA-phhv-63fh-rrc8.md)
  `GHSA-phhv-63fh-rrc8`, `BIT-jenkins-2026-33002`, `CVE-2026-33002` · Maven `org.jenkins-ci.main:jenkins-core`: affected `>=2.442, <2.555`, fixed in `2.555` · CVSS 7.5 High · Not analysed yet · Published 18 Mar 2026 · Tags: CWE-346, CWE-350
- [Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager](https://agentprime.io/advisories/GHSA-7xrh-hqfc-g7qr.md)
  `GHSA-7xrh-hqfc-g7qr`, `BIT-zookeeper-2026-24281`, `CVE-2026-24281` · Maven `org.apache.zookeeper:zookeeper`: affected `>=3.8.0, <3.8.6 || >=3.9.0, <3.9.5`, fixed in `3.8.6`, `3.9.5` · CVSS 7.4 High · Not analysed yet · Published 7 Mar 2026 · Tags: Weak cryptography or TLS, CWE-350
- [Kiteworks Core is vulnerable to Server-Side Request Forgery (SSRF)](https://agentprime.io/advisories/CVE-2026-28271.md)
  `CVE-2026-28271` · CVE record: kiteworks security-advisories · CVSS 6.5 Medium · Not analysed yet · Published 27 Feb 2026 · Tags: Server-side request forgery (SSRF), CWE-350
- [Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.71 - Authorization Bypass via Reverse DNS (PTR record) Spoofing to Unauthenticated Arbitrary Plugin Installation](https://agentprime.io/advisories/CVE-2026-1490.md)
  `CVE-2026-1490` · CVE record: cleantalk Spam protection, Honeypot, Anti-Spam by CleanTalk · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Feb 2026 · Tags: CWE-350
- [Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default](https://agentprime.io/advisories/GHSA-9h52-p55h-vw2f.md)
  `GHSA-9h52-p55h-vw2f`, `CVE-2025-66416`, `PYSEC-2026-1617` · PyPI `mcp`: affected `<1.23.0`, fixed in `1.23.0` · CVSS 7.6 High · Not analysed yet · Published 2 Dec 2025 · Tags: CWE-350, CWE-1188
- [Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default](https://agentprime.io/advisories/GHSA-w48q-cv73-mx4w.md)
  `GHSA-w48q-cv73-mx4w`, `CVE-2025-66414` · npm `@modelcontextprotocol/sdk`: affected `<1.24.0`, fixed in `1.24.0` · CVSS 7.6 High · Not analysed yet · Published 2 Dec 2025 · Tags: CWE-350, CWE-1188
- [Improper handling of DNS over TCP in Simple DNS Plus v9 allows a remote attacker with querying access to the DNS server to cause the server to return request payloads from other clients.](https://agentprime.io/advisories/CVE-2025-61430.md)
  `CVE-2025-61430` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 24 Oct 2025 · Tags: CWE-350
- [Coder AgentAPI exposed user chat history via a DNS rebinding attack in github.com/coder/agentapi](https://agentprime.io/advisories/GHSA-w64r-2g3w-w8w4.md)
  `GHSA-w64r-2g3w-w8w4`, `CVE-2025-59956`, `GO-2025-3991` · Go `github.com/coder/agentapi`: affected `<0.4.0`, fixed in `0.4.0` · CVSS 6.5 Medium · Not analysed yet · Published 23 Oct 2025 · Tags: CWE-350
- [vet MCP Server SSE Transport DNS Rebinding Vulnerability in github.com/safedep/vet](https://agentprime.io/advisories/GHSA-6q9c-m9fr-865m.md)
  `GHSA-6q9c-m9fr-865m`, `CVE-2025-59163`, `GO-2025-3986` · Go `github.com/safedep/vet`: affected `<1.12.5`, fixed in `1.12.5` · CVSS 2.1 Low · Not analysed yet · Published 23 Oct 2025 · Tags: CWE-350
- [DNS rebinding circumvents CORS](https://agentprime.io/advisories/CVE-2025-8036.md)
  `CVE-2025-8036` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 22 Jul 2025 · Tags: CWE-350
- [Websites were able to send any requests to the development server and read the response in vite](https://agentprime.io/advisories/GHSA-vg6x-rcgg-rjx6.md)
  `GHSA-vg6x-rcgg-rjx6`, `CVE-2025-24010` · npm `vite`: affected `<4.5.6 || >=5.0.0, <5.4.12 || >=6.0.0, <6.0.9`, fixed in `4.5.6`, `5.4.12`, `6.0.9` · CVSS 6.5 Medium · Not analysed yet · Published 21 Jan 2025 · Tags: CWE-346, CWE-350, CWE-1385
- [GHSL-2024-091: DNS rebinding attack in home-gallery](https://agentprime.io/advisories/CVE-2024-53275.md)
  `CVE-2024-53275` · CVE record: xemle home-gallery · CVSS 5.3 Medium · Not analysed yet · Published 23 Dec 2024 · Tags: CWE-350
- [MindsDB Vulnerable to Bypass of SSRF Protection with DNS Rebinding](https://agentprime.io/advisories/GHSA-4jcv-vp96-94xr.md)
  `GHSA-4jcv-vp96-94xr`, `CVE-2024-24759`, `PYSEC-2024-74` · PyPI `mindsdb`: affected `<23.12.4.2`, fixed in `23.12.4.2` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Sept 2024 · Tags: Server-side request forgery (SSRF), CWE-350
- [homepage DNS rebinding vulnerability (GHSL-2024-096)](https://agentprime.io/advisories/CVE-2024-42364.md)
  `CVE-2024-42364` · CVE record: gethomepage homepage · CVSS 6.5 Medium · Not analysed yet · Published 23 Aug 2024 · Tags: CWE-350
- [IBM Cognos Controller security bypass](https://agentprime.io/advisories/CVE-2022-22364.md)
  `CVE-2022-22364` · CVE record: IBM Cognos Controller · CVSS 5.3 Medium · Not analysed yet · Published 3 May 2024 · Tags: CWE-350
- [Ollama DNS rebinding vulnerability](https://agentprime.io/advisories/GHSA-5jx5-hqx5-2vrj.md)
  `GHSA-5jx5-hqx5-2vrj`, `CVE-2024-28224`, `GO-2024-2699` · Go `github.com/ollama/ollama`: affected `<0.1.29`, fixed in `0.1.29` · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2024 · Tags: Authentication bypass, CWE-346, CWE-350
- [SpaceX Starlink Wi-Fi router GEN 2 before 2023.53.0 and Starlink Dish before 07dd2798-ff15-4722-a9ee-de28928aed34 allow CSRF (e.g., for a reboot) via a DNS Rebinding attack.](https://agentprime.io/advisories/CVE-2023-52235.md)
  `CVE-2023-52235` · CVE record · CVSS 8.8 High · Not analysed yet · Published 5 Apr 2024 · Tags: CWE-350
- [Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio webhooks, proxy and recorder modes](https://agentprime.io/advisories/GHSA-pmxq-pj47-j8j4.md)
  `GHSA-pmxq-pj47-j8j4`, `BIT-wiremock-2023-41329`, `CVE-2023-41329`, `PYSEC-2026-2050` · Maven `com.github.tomakehurst:wiremock-jre8` and 4 more: affected `<2.35.1`, fixed in `2.35.1` · CVSS 3.9 Low · Not analysed yet · Published 8 Sept 2023 · Tags: Authentication bypass, CWE-350
- [Windows DNS Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2023-32020.md)
  `CVE-2023-32020` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 13 Jun 2023 · Tags: CWE-350
- [RubyGems vulnerable to DNS hijack attack](https://agentprime.io/advisories/GHSA-wp3j-rvfp-624h.md)
  `GHSA-wp3j-rvfp-624h`, `CVE-2015-3900` · RubyGems `rubygems-update`: affected `>=2.0.0, <2.0.16 || >=2.2.0, <2.2.4 || >=2.4.0, <2.4.7`, fixed in `2.0.16`, `2.2.4`, `2.4.7` · No CVSS score · Not analysed yet · Published 14 May 2022 · Tags: CWE-350
- [RubyGems has Origin Validation Error vulnerability](https://agentprime.io/advisories/GHSA-73w7-6w9g-gc8w.md)
  `GHSA-73w7-6w9g-gc8w`, `CVE-2017-0902` · RubyGems `rubygems-update`: affected `<2.6.13`, fixed in `2.6.13` · CVSS 8.1 High · Not analysed yet · Published 13 May 2022 · Tags: CWE-346, CWE-350
- [Withdrawn Advisory: Node.js Inspector RCE via DNS Rebinding](https://agentprime.io/advisories/GHSA-wq4c-wm6x-jw44.md)
  `GHSA-wq4c-wm6x-jw44`, `CVE-2018-7160` · npm `node-inspector`: affected `>=6.0`, no fixed version yet · CVSS 8.8 High · Withdrawn · Not analysed yet · Published 13 May 2022 · Tags: Authentication bypass, CWE-350
- [DNS Rebinding in etcd](https://agentprime.io/advisories/GHSA-wf43-55jj-vwq8.md)
  `GHSA-wf43-55jj-vwq8`, `CVE-2018-1099` · Go `go.etcd.io/etcd`: affected `<3.4.0`, fixed in `3.4.0` · CVSS 5.5 Medium · Not analysed yet · Published 15 Feb 2022 · Tags: CWE-20, CWE-350
- [A vulnerability in WirelessHART-Gateway <= 3.0.8 allows to bypass any IP or firewall based access restrictions through DNS rebinding](https://agentprime.io/advisories/CVE-2021-34561.md)
  `CVE-2021-34561` · CVE record: Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH and 1 more · CVSS 7.5 High · Not analysed yet · Published 31 Aug 2021 · Tags: CWE-350
- [Weave Net clusters susceptible to MitM attacks via IPv6 rogue router advertisements](https://agentprime.io/advisories/GHSA-59qg-grp7-5r73.md)
  `GHSA-59qg-grp7-5r73`, `CVE-2020-11091`, `GO-2022-0794` · Go `github.com/weaveworks/weave`: affected `<2.6.3`, fixed in `2.6.3` · CVSS 5.8 Medium · Not analysed yet · Published 27 May 2021 · Tags: CWE-350
- [Node: Node.js before 10.24.0, 12.21.0, 14.16.0…](https://agentprime.io/advisories/CVE-2021-22884.md)
  `CVE-2021-22884` · CVE record: NodeJS Node · No CVSS score · EPSS 0.37 · Not analysed yet · Published 3 Mar 2021 · Tags: CWE-350

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-350>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-350/>. Everything for agents: <https://agentprime.io/llms.txt>.