# CWE-441.

Every Advisory and CVE whose sources give the weakness CWE-441, newest first.

## Records, newest first (an older page)

- [Datadog Android App: In versions of the Datadog Android application prior to v545-5.9.2…](https://agentprime.io/advisories/CVE-2026-44964.md)
  `CVE-2026-44964` · CVE record: Datadog Android App · CVSS 6.5 Medium · Not analysed yet · Published 7 Aug 2026 · Tags: CWE-441
- [Cross-Cluster Impersonation Confused-Deputy Privilege Escalation](https://agentprime.io/advisories/CVE-2026-44945.md)
  `CVE-2026-44945` · CVE record: SUSE Rancher · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2026 · Tags: Information disclosure, CWE-441
- [swagger-typescript-api vulnerable to Server-Side Request Forgery via spec \`$ref\`](https://agentprime.io/advisories/GHSA-x36r-4347-pm5x.md)
  `GHSA-x36r-4347-pm5x`, `CVE-2026-54663` · npm `swagger-typescript-api`: affected `<13.12.2`, fixed in `13.12.2` · CVSS 6.1 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: Server-side request forgery (SSRF), CWE-20, CWE-441
- [java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor](https://agentprime.io/advisories/GHSA-28f5-38xr-jh2w.md)
  `GHSA-28f5-38xr-jh2w`, `CVE-2026-43910` · Maven `io.appium:java-client`: affected `>=8.2.1, <10.1.1`, fixed in `10.1.1` · CVSS 8.2 High · Not analysed yet · Published 28 Jul 2026 · Tags: Server-side request forgery (SSRF), CWE-441
- [Cluster-proxy: impersonation-header injection grants cluster-admin on every managed cluster](https://agentprime.io/advisories/CVE-2026-17107.md)
  `CVE-2026-17107` · CVE record: Red Hat multicluster engine for Kubernetes 2.10 and 4 more · CVSS 8.5 High · Not analysed yet · Published 24 Jul 2026 · Tags: CWE-441
- [Unintended Proxy or Intermediary in Panduit IntraVUE by Pronetiqs](https://agentprime.io/advisories/CVE-2026-42933.md)
  `CVE-2026-42933` · CVE record: Pronetiqs Panduit Intravue · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Jul 2026 · Tags: CWE-441
- [MongoDB mongos Improper Validation of Internal Flags in Queryable Encryption Write Commands on Sharded Clusters](https://agentprime.io/advisories/CVE-2026-13062.md)
  `CVE-2026-13062` · CVE record: MongoDB MongoDB Server · CVSS 7.1 High · Not analysed yet · Published 22 Jul 2026 · Tags: CWE-441
- [Sparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection](https://agentprime.io/advisories/CVE-2026-47122.md)
  `CVE-2026-47122` · CVE record: sparkle-project Sparkle · CVSS 4.2 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Authentication bypass, CWE-441
- [Astro: Unauthenticated path override in the @astrojs/vercel ISR function](https://agentprime.io/advisories/GHSA-x27w-589x-frm2.md)
  `GHSA-x27w-589x-frm2`, `CVE-2026-73424` · npm `@astrojs/vercel`: affected `>=10.0.3, <11.0.3`, fixed in `11.0.3` · CVSS 6.5 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Broken access control, CWE-441
- [@fastify/reply-from vulnerable to cross-upstream request routing via URL cache key collision](https://agentprime.io/advisories/CVE-2026-16158.md)
  `CVE-2026-16158` · CVE record: @fastify/reply-from @fastify/reply-from · CVSS 8.7 High · Not analysed yet · Published 18 Jul 2026 · Tags: CWE-441
- [Anyquery: Server-Side Request Forgery (SSRF) via Unrestricted SQLite Virtual Table Modules in Server Mode](https://agentprime.io/advisories/GHSA-hwrq-8wxh-q4xv.md)
  `GHSA-hwrq-8wxh-q4xv`, `CVE-2026-54628`, `GO-2026-5988` · Go `github.com/julien040/anyquery`: affected `*`, no fixed version yet · CVSS 8.6 High · Not analysed yet · Published 14 Jul 2026 · Tags: Broken access control, Server-side request forgery (SSRF), CWE-441
- [Input Validation Vulnerabilities in Snowflake Spark Connector](https://agentprime.io/advisories/CVE-2026-15183.md)
  `CVE-2026-15183` · CVE record: Snowflake Snowflake Spark Connector · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jul 2026 · Tags: SQL injection, Server-side request forgery (SSRF), CWE-441
- [Cross-Tenant Data Exfiltration in Apigee via BigQuery Confused Deputy](https://agentprime.io/advisories/CVE-2026-12879.md)
  `CVE-2026-12879` · CVE record: Google Cloud Apigee · CVSS 5.9 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-441, CWE-610
- [@better-auth/sso provider registration has server-side request forgery via unvalidated OIDC endpoints](https://agentprime.io/advisories/GHSA-5rr4-8452-hf4v.md)
  `GHSA-5rr4-8452-hf4v`, `CVE-2026-53513` · npm `@better-auth/sso`: affected `>=0.1.0, <1.6.11`, fixed in `1.6.11` · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Jul 2026 · Tags: Server-side request forgery (SSRF), CWE-20, CWE-345, CWE-441
- [Better Auth vulnerable to unauthorized invitation acceptance via unverified email match in organization plugin](https://agentprime.io/advisories/GHSA-fmh4-wcc4-5jm3.md)
  `GHSA-fmh4-wcc4-5jm3`, `CVE-2026-53514` · npm `better-auth`: affected `<1.6.11`, fixed in `1.6.11` · CVSS 7.7 High · Not analysed yet · Published 7 Jul 2026 · Tags: Authentication bypass, Broken access control, CWE-345, CWE-441
- [Coder's subdomain workspace app routing trusts unauthenticated X-Forwarded-Host header, enabling cross-app data access](https://agentprime.io/advisories/GHSA-5g4w-3vw9-478w.md)
  `GHSA-5g4w-3vw9-478w`, `CVE-2026-55430`, `GO-2026-5917` · Go `github.com/coder/coder/v2`: affected `<2.29.17 || >=2.30.0, <2.32.7 || >=2.33.0, <2.33.8 || >=2.34.0, <2.34.2`, fixed in `2.29.17`, `2.32.7`, `2.33.8`, `2.34.2` · CVSS 5.8 Medium · Not analysed yet · Published 6 Jul 2026 · Tags: CWE-345, CWE-441
- [Apache Camel-Dapr: The Dapr Pub/Sub consumer copied the inbound CloudEvent's pub/sub-name and topic into producer-direction routing headers](https://agentprime.io/advisories/GHSA-583r-f84w-33g7.md)
  `GHSA-583r-f84w-33g7`, `CVE-2026-49086` · Maven `org.apache.camel:camel-dapr`: affected `>=4.12.0, <4.14.8 || >=4.15.0, <4.18.3 || >=4.19.0, <4.21.0`, fixed in `4.14.8`, `4.18.3`, `4.21.0` · CVSS 6.5 Medium · Not analysed yet · Published 6 Jul 2026 · Tags: CWE-20, CWE-441
- [Apache Camel-CXF: The SOAP operation-selection headers used non-Camel-prefixed names (operationName, operationNamespace) that bypass the HTTP header filter, allowing an HTTP client to redirect the invoked SOAP operation](https://agentprime.io/advisories/GHSA-mrrp-9gjm-749v.md)
  `GHSA-mrrp-9gjm-749v`, `CVE-2026-46592` · Maven `org.apache.camel:camel-cxf-rest` and 1 more: affected `>=4.0.0, <4.14.8 || >=4.15.0, <4.18.3 || >=4.19.0, <4.21.0`, fixed in `4.14.8`, `4.18.3`, `4.21.0` · CVSS 7.5 High · Not analysed yet · Published 6 Jul 2026 · Tags: CWE-20, CWE-441
- [Fission: Cross-namespace Environment reference in Package allows build-time command execution and SA token exfiltration](https://agentprime.io/advisories/GHSA-vjhc-cf4p-72q4.md)
  `GHSA-vjhc-cf4p-72q4`, `CVE-2026-49821`, `GO-2026-5859` · Go `github.com/fission/fission`: affected `<1.24.0`, fixed in `1.24.0` · CVSS 7.7 High · Not analysed yet · Published 30 Jun 2026 · Tags: Broken access control, CWE-441
- [Strimzi: Cross-namespace privilege escalation via \`Kafka.spec.entityOperator\`](https://agentprime.io/advisories/GHSA-mw9r-p8xp-wx96.md)
  `GHSA-mw9r-p8xp-wx96`, `CVE-2026-55225` · Maven `io.strimzi:strimzi`: affected `<1.0.1`, fixed in `1.0.1` · CVSS 8.0 High · Not analysed yet · Published 18 Jun 2026 · Tags: Privilege escalation, CWE-441
- [webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies](https://agentprime.io/advisories/GHSA-mx8g-39q3-5c79.md)
  `GHSA-mx8g-39q3-5c79`, `CVE-2026-9595` · npm `webpack-dev-server`: affected `<5.2.5`, fixed in `5.2.5` · CVSS 5.3 Medium · Not analysed yet · Published 17 Jun 2026 · Tags: CWE-346, CWE-441
- [NocoDB: Server-Side Request Forgery via Spreadsheet Import Endpoint](https://agentprime.io/advisories/GHSA-hmcr-rmjq-47qr.md)
  `GHSA-hmcr-rmjq-47qr`, `CVE-2026-53931` · npm `nocodb`: affected `<=0.301.3`, no fixed version yet · CVSS 6.9 Medium · Not analysed yet · Published 17 Jun 2026 · Tags: Server-side request forgery (SSRF), CWE-441
- [PyJWKClient: missing scheme allowlist enables CVE-2024-21643-class SSRF + token forgery via file://, ftp\://, data: schemes](https://agentprime.io/advisories/GHSA-993g-76c3-p5m4.md)
  `GHSA-993g-76c3-p5m4`, `CVE-2026-48522`, `PYSEC-2026-175` · PyPI `pyjwt`: affected `>=2.0.0, <2.13.0`, fixed in `2.13.0` · CVSS 4.2 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Server-side request forgery (SSRF), CWE-441
- [Angular Service Worker Policy-Bypass & Credential-Stripping Vulnerabilities](https://agentprime.io/advisories/GHSA-gv2q-mqqv-365m.md)
  `GHSA-gv2q-mqqv-365m`, `CVE-2026-50169` · npm `@angular/service-worker`: affected `<=18.2.14 || >=19.0.0-next.0, <19.2.23 || >=20.0.0-next.0, <20.3.22 || >=21.0.0-next.0, <21.2.15 || >=22.0.0-next.0, <22.0.0-rc.2`, fixed in `19.2.23`, `20.3.22`, `21.2.15`, `22.0.0-rc.2` · CVSS 5.7 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Information disclosure, CWE-441, CWE-524
- [Radius Controller May Delete a Container Resource via an Injected Deployment Annotation (Multi-Tenant Installs)](https://agentprime.io/advisories/GHSA-fp5j-4fj2-4jvq.md)
  `GHSA-fp5j-4fj2-4jvq`, `CVE-2026-53999`, `GO-2026-5373` · Go `github.com/radius-project/radius`: affected `<0.58.0`, fixed in `0.58.0` · CVSS 7.7 High · Not analysed yet · Published 12 Jun 2026 · Tags: CWE-20, CWE-441
- [Omni: Operator can traverse image-factory API paths via unsanitized \`talos_version\` in CreateSchematic](https://agentprime.io/advisories/GHSA-c66c-vq6w-fvh5.md)
  `GHSA-c66c-vq6w-fvh5`, `CVE-2026-45723`, `GO-2026-5316` · Go `github.com/siderolabs/omni`: affected `<1.6.6 || >=1.7.0, <1.7.3`, fixed in `1.6.6`, `1.7.3` · CVSS 2.7 Low · Not analysed yet · Published 5 Jun 2026 · Tags: Path traversal, Information disclosure, Server-side request forgery (SSRF), CWE-20
- [Mercusys AC12G (EU) V1 router with firmware AC12G(EU)\_V1_200909 allows UPnP AddPortMapping to forward external ports to the router's own admin interface by accepting its own IP (192.168.1.1) or local…](https://agentprime.io/advisories/CVE-2026-36608.md)
  `CVE-2026-36608` · CVE record · CVSS 8.8 High · Not analysed yet · Published 3 Jun 2026 · Tags: CWE-441
- [In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-0098.md)
  `CVE-2026-0098` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-441
- [In multiple functions of PipTaskOrganizer.java, there is a possible way to launch an activity from the background due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-48570.md)
  `CVE-2025-48570` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-441
- [axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in \`config.proxy\`](https://agentprime.io/advisories/GHSA-35jp-ww65-95wh.md)
  `GHSA-35jp-ww65-95wh`, `CVE-2026-44494` · npm `axios`: affected `>=1.0.0, <1.16.0`, fixed in `1.16.0` · CVSS 8.7 High · Not analysed yet · Published 29 May 2026 · Tags: Broken access control, Prototype pollution, CWE-441
- [Unintended Proxy or Intermediary ('Confused Deputy') in GitLab](https://agentprime.io/advisories/CVE-2026-3160.md)
  `CVE-2026-3160` · CVE record: GitLab GitLab · CVSS 5.8 Medium · Not analysed yet · Published 14 May 2026 · Tags: CWE-441
- [Duplicate Advisory: OpenClaw: Workspace dotenv files cannot override connector endpoint hosts](https://agentprime.io/advisories/GHSA-5jgm-f9wr-9qm7.md)
  `GHSA-5jgm-f9wr-9qm7` · npm `openclaw`: affected `<2026.4.22`, fixed in `2026.4.22` · CVSS 5.0 Medium · Withdrawn · Not analysed yet · Published 11 May 2026 · Tags: CWE-441
- [Duplicate Advisory: OpenClaw: Workspace dotenv MiniMax host override could redirect credentialed requests](https://agentprime.io/advisories/GHSA-4mhr-cxr4-2prm.md)
  `GHSA-4mhr-cxr4-2prm` · npm `openclaw`: affected `>=2026.4.5, <2026.4.20`, fixed in `2026.4.20` · CVSS 5.0 Medium · Withdrawn · Not analysed yet · Published 11 May 2026 · Tags: CWE-441
- [GrapheneOS: GrapheneOS before 2026050400 allows attackers to discover the real IP address of a VPN…](https://agentprime.io/advisories/CVE-2026-45182.md)
  `CVE-2026-45182` · CVE record: GrapheneOS GrapheneOS · CVSS 2.2 Low · Not analysed yet · Published 9 May 2026 · Tags: CWE-441
- [Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0](https://agentprime.io/advisories/GHSA-pmwg-cvhr-8vh7.md)
  `GHSA-pmwg-cvhr-8vh7`, `CVE-2026-42043` · npm `axios`: affected `<0.31.1 || >=1.0.0, <1.15.1`, fixed in `0.31.1`, `1.15.1` · CVSS 7.2 High · Not analysed yet · Published 5 May 2026 · Tags: Server-side request forgery (SSRF), CWE-183, CWE-441
- [pyload-ng: non-admin SETTINGS users can redirect all outbound traffic through an attacker-controlled proxy via unrestricted \`proxy.\*\` config (incomplete fix for CVE-2026-33509 / -35463 / -35464 / -35586)](https://agentprime.io/advisories/GHSA-pg67-9wjv-mr85.md)
  `GHSA-pg67-9wjv-mr85`, `CVE-2026-42313`, `PYSEC-2026-127` · PyPI `pyload-ng`: affected `<0.5.0b3.dev100`, fixed in `0.5.0b3.dev100` · CVSS 8.3 High · Not analysed yet · Published 4 May 2026 · Tags: Broken access control, Server-side request forgery (SSRF), CWE-441
- [OpenClaw: Workspace dotenv files cannot override connector endpoint hosts](https://agentprime.io/advisories/GHSA-55cf-xx38-4p9p.md)
  `GHSA-55cf-xx38-4p9p`, `CVE-2026-45003` · npm `openclaw`: affected `<2026.4.22`, fixed in `2026.4.22` · CVSS 4.1 Medium · Not analysed yet · Published 4 May 2026 · Tags: CWE-427, CWE-441, CWE-610
- [Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting](https://agentprime.io/advisories/CVE-2026-7381.md)
  `CVE-2026-7381` · CVE record: MIYAGAWA Plack::Middleware::XSendfile · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Apr 2026 · Tags: Information disclosure, CWE-441, CWE-913
- [Duplicate Advisory: OpenClaw: MSTeams thread history bypasses sender allowlist via Graph API](https://agentprime.io/advisories/GHSA-8pf2-vj79-4wxg.md)
  `GHSA-8pf2-vj79-4wxg` · npm `openclaw`: affected `<2026.3.31`, fixed in `2026.3.31` · CVSS 5.4 Medium · Withdrawn · Not analysed yet · Published 28 Apr 2026 · Tags: CWE-441
- [OpenClaw: Workspace dotenv MiniMax host override could redirect credentialed requests](https://agentprime.io/advisories/GHSA-h2vw-ph2c-jvwf.md)
  `GHSA-h2vw-ph2c-jvwf`, `CVE-2026-44992` · npm `openclaw`: affected `>=2026.4.5, <2026.4.20`, fixed in `2026.4.20` · CVSS 4.1 Medium · Not analysed yet · Published 25 Apr 2026 · Tags: Hard-coded credentials, CWE-15, CWE-441
- [Kratos has a Confused Deputy issue](https://agentprime.io/advisories/GHSA-jj45-xvq5-rhh9.md)
  `GHSA-jj45-xvq5-rhh9`, `CVE-2026-6993`, `GO-2026-5471` · Go `github.com/go-kratos/kratos/v2`: affected `<=2.9.2`, no fixed version yet · CVSS 6.9 Medium · Not analysed yet · Published 25 Apr 2026 · Tags: CWE-441
- [Kofax Capture 6.0.0.0 Unauthenticated File Read/Write & SMB Coercion via .NET Remoting](https://agentprime.io/advisories/CVE-2026-23751.md)
  `CVE-2026-23751` · CVE record: Tungsten Automation Tungsten Capture (formerly Kofax Capture) · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Apr 2026 · Tags: Authentication bypass, CWE-441
- [Unisys WebPerfect Image Suite 3.0 NTLMv2 Hash Leakage via .NET Remoting](https://agentprime.io/advisories/CVE-2026-39906.md)
  `CVE-2026-39906` · CVE record: Unisys WebPerfect Image Suite · CVSS 7.0 High · Not analysed yet · Published 14 Apr 2026 · Tags: CWE-441
- [kyverno apicall servicecall implicit bearer token injection leaks kyverno serviceaccount token](https://agentprime.io/advisories/GHSA-q93q-v844-jrqp.md)
  `GHSA-q93q-v844-jrqp`, `BIT-kyverno-2026-40868`, `CVE-2026-40868`, `GO-2026-5575` · Go `github.com/kyverno/kyverno`: affected `<1.17.0`, fixed in `1.17.0` · CVSS 8.1 High · Not analysed yet · Published 14 Apr 2026 · Tags: Information disclosure, CWE-441
- [Aiven Operator has cross-namespace secret exfiltration via ClickhouseUser connInfoSecretSource](https://agentprime.io/advisories/GHSA-99j8-wv67-4c72.md)
  `GHSA-99j8-wv67-4c72`, `CVE-2026-39961`, `GO-2026-5283` · Go `github.com/aiven/aiven-operator`: affected `>=0.31.0, <0.37.0`, fixed in `0.37.0` · CVSS 6.8 Medium · Not analysed yet · Published 10 Apr 2026 · Tags: Privilege escalation, CWE-441
- [Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF](https://agentprime.io/advisories/GHSA-3p68-rc4w-qgx5.md)
  `GHSA-3p68-rc4w-qgx5`, `CVE-2025-62718` · npm `axios`: affected `<0.31.0 || >=1.0.0, <1.15.0`, fixed in `0.31.0`, `1.15.0` · CVSS 6.3 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: Server-side request forgery (SSRF), CWE-441, CWE-1289
- [OpenClaw: MSTeams thread history bypasses sender allowlist via Graph API](https://agentprime.io/advisories/GHSA-chfm-xgc4-47rj.md)
  `GHSA-chfm-xgc4-47rj`, `CVE-2026-41365` · npm `openclaw`: affected `<2026.3.31`, fixed in `2026.3.31` · CVSS 5.3 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: Broken access control, CWE-441
- [FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities](https://agentprime.io/advisories/GHSA-rww4-4w9c-7733.md)
  `GHSA-rww4-4w9c-7733`, `CVE-2026-27124`, `PYSEC-2026-2476` · PyPI `fastmcp`: affected `<3.2.0`, fixed in `3.2.0` · CVSS 8.2 High · Not analysed yet · Published 31 Mar 2026 · Tags: CWE-441
- [Astro: Unauthenticated Path Override via \`x-astro-path\` / \`x_astro_path\`](https://agentprime.io/advisories/GHSA-mr6q-rp88-fx84.md)
  `GHSA-mr6q-rp88-fx84`, `CVE-2026-33768` · npm `@astrojs/vercel`: affected `<10.0.2`, fixed in `10.0.2` · CVSS 6.5 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Broken access control, CWE-441
- [In gmc_ddr_handle_mba_mr_req of gmc_mba_ddr.c, there is a possible escalation of privileges due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-0107.md)
  `CVE-2026-0107` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 10 Mar 2026 · Tags: CWE-441
- [OliveTin's RestartAction always runs actions as guest](https://agentprime.io/advisories/GHSA-p443-p7w5-2f7f.md)
  `GHSA-p443-p7w5-2f7f`, `CVE-2026-30225`, `GO-2026-4625` · Go `github.com/OliveTin/OliveTin`: affected `<0.0.0-20260305000458-cb46a597b246`, fixed in `0.0.0-20260305000458-cb46a597b246` · CVSS 5.3 Medium · Not analysed yet · Published 5 Mar 2026 · Tags: Privilege escalation, CWE-441
- [OpenClaw Vulnerable to Remote Code Execution via Node Invoke Approval Bypass in Gateway](https://agentprime.io/advisories/GHSA-gv46-4xfq-jv58.md)
  `GHSA-gv46-4xfq-jv58`, `CVE-2026-28466` · npm `openclaw`: affected `<2026.2.14`, fixed in `2026.2.14` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Mar 2026 · Tags: Broken access control, CWE-20, CWE-441
- [In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible cross-user permission bypass due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-0021.md)
  `CVE-2026-0021` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-441
- [In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-0013.md)
  `CVE-2026-0013` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-441
- [In multiple functions of FaceEnroll.kt, there is a possible privilege escalation due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-0008.md)
  `CVE-2026-0008` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-441
- [In executeRequest of ActivityStarter.java, there is a possible launch anywhere due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-48646.md)
  `CVE-2025-48646` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-441
- [In multiple functions of MediaProvider.java, there is a possible external storage write permission bypass due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-48579.md)
  `CVE-2025-48579` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-441
- [Coturn: IPv4-mapped IPv6 (::ffff:0:0/96) bypasses denied-peer-ip ACL](https://agentprime.io/advisories/CVE-2026-27624.md)
  `CVE-2026-27624` · CVE record: coturn coturn · CVSS 7.2 High · Not analysed yet · Published 25 Feb 2026 · Tags: Broken access control, CWE-441
- [An unintended proxy or intermediary in the AMD power management firmware (PMFW) could allow a privileged attacker to send malformed messages to the system management unit (SMU) potentially resulting…](https://agentprime.io/advisories/CVE-2023-31313.md)
  `CVE-2023-31313` · CVE record: AMD AMD Instinct™ MI210 and 1 more · CVSS 7.2 High · Not analysed yet · Published 12 Feb 2026 · Tags: CWE-441
- [Skipper Ingress Controller Allows Unauthorized Access to Internal Services via ExternalName in github.com/zalando/skipper](https://agentprime.io/advisories/GHSA-mxxc-p822-2hx9.md)
  `GHSA-mxxc-p822-2hx9`, `CVE-2026-24470`, `GO-2026-4378` · Go `github.com/zalando/skipper`: affected `<0.24.0`, fixed in `0.24.0` · CVSS 8.1 High · Not analysed yet · Published 2 Feb 2026 · Tags: Server-side request forgery (SSRF), CWE-441

Newest: <https://agentprime.io/advisories/tag/cwe-441.md>
Older: <https://agentprime.io/advisories/tag/cwe-441.md?cursor=WyIyMDI2LTAyLTAyVDIxOjA1OjU1LjAwMDAwMFoiLCJHSFNBLW14eGMtcDgyMi0yaHg5Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-441&cursor=WyIyMDI2LTA4LTEwVDIwOjQ0OjI1LjE5MzAwMFoiLCJDVkUtMjAyNi0xNjQ1NiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-441/?cursor=WyIyMDI2LTA4LTEwVDIwOjQ0OjI1LjE5MzAwMFoiLCJDVkUtMjAyNi0xNjQ1NiJd>. Everything for agents: <https://agentprime.io/llms.txt>.