# CWE-441. Every Advisory and CVE whose sources give the weakness CWE-441, newest first. ## Records, newest first (an older page) - [Improper Validation in Conduit-derived homeservers resulting in Unintended Proxy or Intermediary ('Confused Deputy')](https://agentprime.io/advisories/CVE-2026-24471.md) `CVE-2026-24471` · CVE record: continuwuity continuwuity · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Feb 2026 · Tags: CWE-441 - [SurrealDB Affected by Confused Deputy Privilege Escalation through Future Fields and Functions](https://agentprime.io/advisories/GHSA-3v2x-9xcv-2v2v.md) `GHSA-3v2x-9xcv-2v2v`, `CVE-2026-63763` · crates.io `surrealdb`: affected `<2.5.0 || >=3.0.0-alpha.1, <3.0.0-beta.3`, fixed in `2.5.0`, `3.0.0-beta.3` · CVSS 7.5 High · Not analysed yet · Published 22 Jan 2026 · Tags: Broken access control, CWE-441 - [Nuvation Energy nCloud Client-to-Client Communication](https://agentprime.io/advisories/CVE-2025-64125.md) `CVE-2025-64125` · CVE record: Nuvation Energy nCloud VPN Service · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Jan 2026 · Tags: CWE-441 - [Nuvation Energy Multi-Stack Controller Proxy service allows arbitrary BMS access](https://agentprime.io/advisories/CVE-2025-64123.md) `CVE-2025-64123` · CVE record: Nuvation Energy Multi-Stack Controller (MSC) · CVSS 7.9 High · Not analysed yet · Published 2 Jan 2026 · Tags: CWE-441 - [Gitea sometimes mishandles propagation of token scope for access control within one of its own package registries in code.gitea.io/gitea](https://agentprime.io/advisories/GHSA-f85h-c7m6-cfpm.md) `GHSA-f85h-c7m6-cfpm`, `BIT-gitea-2025-68944`, `CVE-2025-68944`, `GO-2025-4264` · Go `code.gitea.io/gitea`: affected `<1.22.2`, fixed in `1.22.2` · CVSS 5.0 Medium · Not analysed yet · Published 30 Dec 2025 · Tags: CWE-441 - [Conduit-derived homeservers are affected by a Confused Deputy and Improper Input Validation issue](https://agentprime.io/advisories/CVE-2025-68667.md) `CVE-2025-68667` · CVE record: continuwuity continuwuity · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Dec 2025 · Tags: CWE-20, CWE-441 - [Misconfigured Internal Proxy in runtimes-inventory-rhel8-operator Grants Standard Users Full Cluster Administrator Access in github.com/RedHatInsights/runtimes-inventory-operator](https://agentprime.io/advisories/GHSA-cc8c-28gj-px38.md) `GHSA-cc8c-28gj-px38`, `CVE-2025-11393`, `GO-2025-4241` · Go `github.com/RedHatInsights/runtimes-inventory-operator`: affected `*`, no fixed version yet · CVSS 8.7 High · Not analysed yet · Published 22 Dec 2025 · Tags: CWE-441 - [In onCreateTasks of CameraActivity.java, there is a possible permission bypass due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-36889.md) `CVE-2025-36889` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 11 Dec 2025 · Tags: CWE-441 - [In validateIconUserBoundary of PrintManagerService.java, there is a possible cross-user image leak due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-48628.md) `CVE-2025-48628` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-441 - [In multiple locations, there is a possible way to alter the primary user's face unlock settings due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-48598.md) `CVE-2025-48598` · CVE record: Google Android · CVSS 6.6 Medium · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-441 - [In onActivityResult of EditFdnContactScreen.java, there is a possible way to leak contacts from the work profile due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-48586.md) `CVE-2025-48586` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-441 - [In multiple functions of NotificationStation.java, there is a possible cross-profile information disclosure due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-48555.md) `CVE-2025-48555` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-441 - [In grantAllowlistedPackagePermissions of SettingsSliceProvider.java, there is a possible way for a third party app to modify secure settings due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-48536.md) `CVE-2025-48536` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-441 - [In multiple locations, there is a possible way to leak audio files across user profiles due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-22420.md) `CVE-2025-22420` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-441 - [fastify-reply-from affected by bypass of reply forwarding](https://agentprime.io/advisories/GHSA-2q7r-29rg-6m5h.md) `GHSA-2q7r-29rg-6m5h`, `CVE-2025-66415` · npm `@fastify/reply-from`: affected `<12.5.0`, fixed in `12.5.0` · CVSS 6.9 Medium · Not analysed yet · Published 2 Dec 2025 · Tags: CWE-441 - [Rack has a Possible Information Disclosure Vulnerability](https://agentprime.io/advisories/GHSA-r657-rxjc-j557.md) `GHSA-r657-rxjc-j557`, `CVE-2025-61780` · RubyGems `rack`: affected `<2.2.20 || >=3.0, <3.1.18 || >=3.2, <3.2.3`, fixed in `2.2.20`, `3.1.18`, `3.2.3` · CVSS 5.8 Medium · Not analysed yet · Published 10 Oct 2025 · Tags: Information disclosure, CWE-441, CWE-913 - [marimo vulnerable to proxy abuse of /mpl/{port}/](https://agentprime.io/advisories/GHSA-xjv7-6w92-42r7.md) `GHSA-xjv7-6w92-42r7` · PyPI `marimo`: affected `>=0.9.20, <0.16.4`, fixed in `0.16.4` · CVSS 4.0, no score published · Not analysed yet · Published 1 Oct 2025 · Tags: CWE-441 - [In System UI, there is a possible way to view other users' images due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-32320.md) `CVE-2025-32320` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 5 Sept 2025 · Tags: CWE-441 - [In App Widget, there is a possible Information Disclosure due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-32317.md) `CVE-2025-32317` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 5 Sept 2025 · Tags: CWE-441 - [Google Android: In AndroidManifest.xml, there is a possible way for an app to monitor motion events due…](https://agentprime.io/advisories/CVE-2025-48560.md) `CVE-2025-48560` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-441 - [Google Android: In multiple locations, there is a possible leak of an image across the Android User…](https://agentprime.io/advisories/CVE-2025-48551.md) `CVE-2025-48551` · CVE record: Google Android · CVSS 5.0 Medium · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-441 - [In isSystemUid of AccountManagerService.java, there is a possible way for an app to access privileged APIs due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-48545.md) `CVE-2025-48545` · CVE record: Google Android · CVSS 7.1 High · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-441 - [In markMediaAsFavorite of MediaProvider.java, there is a possible way to bypass the WRITE_EXTERNAL_STORAGE permission due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-48532.md) `CVE-2025-48532` · CVE record: Google Android · CVSS 7.3 High · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-441 - [In setRingtoneUri of VoicemailNotificationSettingsUtil.java , there is a possible cross user data leak due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-48529.md) `CVE-2025-48529` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-441 - [In onActivityResult of VoicemailSettingsActivity.java, there is a possible work profile contact number leak due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-32346.md) `CVE-2025-32346` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-441 - [In multiple functions of AppRestrictionsFragment.java, there is a possible way to bypass intent security check due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-32326.md) `CVE-2025-32326` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-441 - [In onCommand of ActivityManagerShellCommand.java, there is a possible arbitrary activity launch due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-32324.md) `CVE-2025-32324` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-441 - [In isSafeIntent of AccountTypePreferenceLoader.java, there is a possible way to bypass an intent type check due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-32321.md) `CVE-2025-32321` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-441 - [In validateUriSchemeAndPermission of DisclaimersParserImpl.java , there is a possible way to access data from another user due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-26454.md) `CVE-2025-26454` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-441 - [In getContextForResourcesEnsuringCorrectCachedApkPaths of RemoteViews.java, there is a possible way to load arbitrary java code in a privileged context due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-22441.md) `CVE-2025-22441` · CVE record: Google Android · CVSS 7.3 High · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-441 - [In loadDrawableForCookie of ResourcesImpl.java, there is a possible way to access task snapshots of other apps due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-26452.md) `CVE-2025-26452` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-441 - [In multiple locations, there is a possible confused deputy due to Intent Redirect.](https://agentprime.io/advisories/CVE-2025-22418.md) `CVE-2025-22418` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-441 - [In onCreate of ChooserActivity.java , there is a possible way to view other users' images due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-22416.md) `CVE-2025-22416` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-441 - [kro Confused Deputy vulnerability in github.com/kro-run/kro](https://agentprime.io/advisories/GHSA-7633-x85h-5mqh.md) `GHSA-7633-x85h-5mqh`, `CVE-2025-48710`, `GO-2025-3741` · Go `github.com/kro-run/kro`: affected `<0.2.1`, fixed in `0.2.1` · CVSS 4.1 Medium · Not analysed yet · Published 9 Jun 2025 · Tags: CWE-441 - [code-server's session cookie can be extracted by having user visit specially crafted proxy URL](https://agentprime.io/advisories/GHSA-p483-wpfp-42cj.md) `GHSA-p483-wpfp-42cj`, `CVE-2025-47269` · npm `code-server`: affected `<4.99.4`, fixed in `4.99.4` · CVSS 8.3 High · Critical (CVSS 7+ and EPSS) · EPSS 0.56 · Not analysed yet · Published 9 May 2025 · Tags: CWE-441 - [JTEKT ELECTRONICS CORPORATION HMI ViewJet C-more series: Unintended proxy or intermediary ('Confused Deputy') issue exists in HMI ViewJet C-more…](https://agentprime.io/advisories/CVE-2025-25061.md) `CVE-2025-25061` · CVE record: JTEKT ELECTRONICS CORPORATION HMI ViewJet C-more series and 1 more · CVSS 5.8 Medium · Not analysed yet · Published 4 Apr 2025 · Tags: CWE-441 - [Misskey's Incomplete Patch of CVE-2024-52591 Leads to Forgery of Federated Notes](https://agentprime.io/advisories/CVE-2025-25306.md) `CVE-2025-25306` · CVE record: misskey-dev misskey · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Mar 2025 · Tags: CWE-346, CWE-441, CWE-1025 - [Unintended Proxy or Intermediary ('Confused Deputy') in GitLab](https://agentprime.io/advisories/CVE-2024-9870.md) `CVE-2024-9870` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 12 Feb 2025 · Tags: CWE-441 - [Mitmweb API Authentication Bypass Using Proxy Server](https://agentprime.io/advisories/GHSA-wg33-5h85-7q5p.md) `GHSA-wg33-5h85-7q5p`, `CVE-2025-23217`, `PYSEC-2026-1630` · PyPI `mitmproxy`: affected `<11.1.2`, fixed in `11.1.2` · CVSS 8.2 High · Not analysed yet · Published 6 Feb 2025 · Tags: Authentication bypass, CWE-441 - [An open proxy vulnerability affects HCL Nomad server on Domino](https://agentprime.io/advisories/CVE-2024-30128.md) `CVE-2024-30128` · CVE record: HCL Software Nomad server on Domino · CVSS 8.6 High · Not analysed yet · Published 25 Sept 2024 · Tags: CWE-441 - [In updateNotificationChannelFromPrivilegedListener of NotificationManagerService.java, there is a possible cross-user data leak due to a confused deputy.](https://agentprime.io/advisories/CVE-2024-31319.md) `CVE-2024-31319` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-441 - [Pterodactyl Wings vulnerable to Server-Side Request Forgery during remote file pull in github.com/pterodactyl/wings](https://agentprime.io/advisories/GHSA-qq22-jj8x-4wwv.md) `GHSA-qq22-jj8x-4wwv`, `CVE-2024-34068`, `GO-2024-2815` · Go `github.com/pterodactyl/wings`: affected `<1.11.12`, fixed in `1.11.12` · CVSS 6.4 Medium · Not analysed yet · Published 10 Jun 2024 · Tags: Broken access control, CWE-441 - [In setMediaButtonReceiver of MediaSessionRecord.java, there is a possible way to send a pending intent on behalf of system_server due to a confused deputy.](https://agentprime.io/advisories/CVE-2023-40111.md) `CVE-2023-40111` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 15 Feb 2024 · Tags: CWE-441 - [Uncontrolled data used in content resolution](https://agentprime.io/advisories/CVE-2023-33188.md) `CVE-2023-33188` · CVE record: federicoiosue Omni-Notes · CVSS 6.3 Medium · Not analysed yet · Published 27 May 2023 · Tags: CWE-441, CWE-610 - [Android: In getNumberFromCallIntent of NewOutgoingCallIntentBroadcaster.java…](https://agentprime.io/advisories/CVE-2023-21082.md) `CVE-2023-21082` · CVE record: Android · CVSS 5.5 Medium · Not analysed yet · Published 19 Apr 2023 · Tags: CWE-441 - [Metabase vulnerable to Remote Code Execution via H2](https://agentprime.io/advisories/CVE-2022-39361.md) `CVE-2022-39361` · CVE record: metabase metabase · CVSS 8.8 High · Not analysed yet · Published 26 Oct 2022 · Tags: CWE-20, CWE-441 - [Tasks.org vulnerable to data exfiltration by malicous app or adb](https://agentprime.io/advisories/CVE-2022-39349.md) `CVE-2022-39349` · CVE record: tasks tasks · CVSS 5.5 Medium · Not analysed yet · Published 25 Oct 2022 · Tags: Information disclosure, CWE-441 - [FileZilla Server PORT confused deputy](https://agentprime.io/advisories/CVE-2015-10003.md) `CVE-2015-10003` · CVE record: FileZilla Server · CVSS 4.3 Medium · Not analysed yet · Published 17 Jul 2022 · Tags: CWE-441 - [Jenkins Publisher Over CIFS Plugin confused deputy vulnerability](https://agentprime.io/advisories/GHSA-rf7h-9m85-535v.md) `GHSA-rf7h-9m85-535v`, `CVE-2018-1999038` · Maven `org.jenkins-ci.plugins:publish-over-cifs`: affected `<0.11`, fixed in `0.11` · CVSS 4.2 Medium · Not analysed yet · Published 14 May 2022 · Tags: CWE-441 - [An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules.](https://agentprime.io/advisories/CVE-2021-20042.md) `CVE-2021-20042` · CVE record: SonicWall SonicWall SMA100 · No CVSS score · Not analysed yet · Published 8 Dec 2021 · Tags: CWE-441 - [Confused Deputy in Kubernetes](https://agentprime.io/advisories/GHSA-vw47-mr44-3jf9.md) `GHSA-vw47-mr44-3jf9`, `CVE-2021-25740` · Go `k8s.io/kubernetes`: affected `<=1.22.2`, no fixed version yet · CVSS 3.1 Low · Not analysed yet · Published 21 Sept 2021 · Tags: CWE-441, CWE-610 - [Confused Deputy in Kubernetes](https://agentprime.io/advisories/GHSA-74j8-88mm-7496.md) `GHSA-74j8-88mm-7496`, `CVE-2020-8561` · Go `k8s.io/kubernetes`: affected `<=1.22.2`, no fixed version yet · CVSS 4.1 Medium · Not analysed yet · Published 21 Sept 2021 · Tags: CWE-441, CWE-610 - [ExternalName Services can be used to gain access to Envoy's admin interface](https://agentprime.io/advisories/GHSA-5ph6-qq5x-7jwc.md) `GHSA-5ph6-qq5x-7jwc`, `BIT-contour-2021-32783`, `CVE-2021-32783`, `GO-2022-0922` · Go `github.com/projectcontour/contour`: affected `<1.14.2 || >=1.15.0, <1.15.2 || >=1.16.0, <1.16.1 || >=1.17.0, <1.17.1`, fixed in `1.14.2`, `1.15.2`, `1.16.1`, `1.17.1` · CVSS 8.5 High · Not analysed yet · Published 30 Aug 2021 · Tags: CWE-441, CWE-610 - [Confused deputy attack in sandbox module resolution](https://agentprime.io/advisories/CVE-2021-32773.md) `CVE-2021-32773` · CVE record: racket racket · CVSS 6.1 Medium · Not analysed yet · Published 19 Jul 2021 · Tags: CWE-441 - [Externally Controlled Reference to a Resource in Another Sphere and Confused Deputy in Spring Cloud Netflix](https://agentprime.io/advisories/GHSA-qgcg-p3v2-9h4p.md) `GHSA-qgcg-p3v2-9h4p`, `CVE-2020-5412` · Maven `org.springframework.cloud:spring-cloud-netflix`: affected `>=2.2.0, <2.2.4 || >=2.1.0, <2.1.6`, fixed in `2.2.4`, `2.1.6` · CVSS 6.5 Medium · EPSS 0.10 · Not analysed yet · Published 30 Apr 2021 · Tags: CWE-441, CWE-610 - [Loopback bypass in Coturn](https://agentprime.io/advisories/CVE-2020-26262.md) `CVE-2020-26262` · CVE record: coturn coturn · CVSS 7.2 High · Not analysed yet · Published 13 Jan 2021 · Tags: CWE-441, CWE-682 - [ELOG: ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when…](https://agentprime.io/advisories/CVE-2019-3996.md) `CVE-2019-3996` · CVE record: ELOG · No CVSS score · Not analysed yet · Published 17 Dec 2019 · Tags: CWE-441 - [Cisco DNA Center Unintended Proxy Via SWIM Import Interface Vulnerability](https://agentprime.io/advisories/CVE-2019-1841.md) `CVE-2019-1841` · CVE record: Cisco Cisco Digital Network Architecture Center (DNA Center) · CVSS 6.5 Medium · Not analysed yet · Published 18 Apr 2019 · Tags: CWE-441 - [Tenable MikroTik RouterOS: MikroTik RouterOS before 6.43.12 (stable) and 6.42.12 (long-term) is vulnerable to an…](https://agentprime.io/advisories/CVE-2019-3924.md) `CVE-2019-3924` · CVE record: Tenable MikroTik RouterOS · No CVSS score · EPSS 0.16 · Not analysed yet · Published 20 Feb 2019 · Tags: CWE-441 Newest: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .