# CWE-441.

Every Advisory and CVE whose sources give the weakness CWE-441, newest first.

## Records, newest first (an older page)

- [In dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-55270.md)
  `CVE-2026-55270` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-441
- [BuildKit improperly handles special files in build snapshots](https://agentprime.io/advisories/CVE-2026-93320.md)
  `CVE-2026-93320` · CVE record: moby BuildKit · CVSS 6.0 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-441
- [Axios: Node HTTP adapter prototype-pollution gadget allows request socket hijack via inherited createConnection](https://agentprime.io/advisories/GHSA-m8m8-qj5v-23w3.md)
  `GHSA-m8m8-qj5v-23w3`, `CVE-2026-101905` · npm `axios`: affected `>=1.15.2, <1.20.0`, fixed in `1.20.0` · CVSS 7.6 High · Not analysed yet · Published 30 Sept 2026 · Tags: Prototype pollution, CWE-441
- [Axios: maxRedirects: 0 is not enforced by the fetch adapter, allowing redirect-based SSRF](https://agentprime.io/advisories/GHSA-r4gj-5m52-g5wh.md)
  `GHSA-r4gj-5m52-g5wh`, `CVE-2026-101907` · npm `axios`: affected `>=1.17.0, <1.20.0`, fixed in `1.20.0` · CVSS 7.0 High · Not analysed yet · Published 30 Sept 2026 · Tags: Open redirect, CWE-441
- [Google Chrome: Confused deputy in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a…](https://agentprime.io/advisories/CVE-2026-95328.md)
  `CVE-2026-95328` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-441
- [Google Chrome: Confused deputy in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote…](https://agentprime.io/advisories/CVE-2026-95361.md)
  `CVE-2026-95361` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-441
- [Unintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Privilege Escalation](https://agentprime.io/advisories/CVE-2026-72668.md)
  `CVE-2026-72668` · CVE record: Elastic Kibana · CVSS 7.3 High · Not analysed yet · Published 26 Sept 2026 · Tags: CWE-441
- [kyverno before 1.19.1 Privilege Escalation via Policy apiCall urlPath](https://agentprime.io/advisories/CVE-2026-100706.md)
  `CVE-2026-100706` · CVE record: kyverno kyverno · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Sept 2026 · Tags: CWE-441
- [Capgo Build Upload Proxy Authorization Bypass via TUS Resource](https://agentprime.io/advisories/CVE-2026-100625.md)
  `CVE-2026-100625` · CVE record: Cap-go capgo.app · CVSS 8.7 High · Not analysed yet · Published 26 Sept 2026 · Tags: CWE-441
- [Openshift/console: openshift/console: unauthenticated reverse proxy to in-cluster catalogd service with session token forwarding](https://agentprime.io/advisories/CVE-2026-75886.md)
  `CVE-2026-75886` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.17 and 4 more · CVSS 7.2 High · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-441
- [9router /v1 APIs has unauthenticated access via reverse proxy locality collapse](https://agentprime.io/advisories/GHSA-x5c9-v98j-722r.md)
  `GHSA-x5c9-v98j-722r`, `CVE-2026-56675` · npm `9router`: affected `<0.5.2`, fixed in `0.5.2` · CVSS 8.3 High · Not analysed yet · Published 23 Sept 2026 · Tags: Authentication bypass, CWE-441
- [MCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update_issue](https://agentprime.io/advisories/GHSA-2xj6-xx86-cwwc.md)
  `GHSA-2xj6-xx86-cwwc`, `CVE-2026-77255`, `PYSEC-2026-4080` · PyPI `mcp-atlassian`: affected `<0.22.0`, fixed in `0.22.0` · CVSS 8.6 High · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal, CWE-441
- [MCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload Path](https://agentprime.io/advisories/GHSA-wv8v-v4c5-v75j.md)
  `GHSA-wv8v-v4c5-v75j`, `CVE-2026-77246`, `PYSEC-2026-4104` · PyPI `mcp-atlassian`: affected `<0.22.0`, fixed in `0.22.0` · CVSS 7.4 High · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal, Information disclosure, CWE-441
- [Azure Arc Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69399.md)
  `CVE-2026-69399` · CVE record: Microsoft Azure ARC · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-441
- [CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP](https://agentprime.io/advisories/GHSA-9gm5-9rfh-m6vx.md)
  `GHSA-9gm5-9rfh-m6vx`, `CVE-2026-86003`, `GO-2026-6506` · Go `github.com/coredns/coredns`: affected `<1.14.7`, fixed in `1.14.7` · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-441
- [Metacat acts as unintended proxy to backend Apache SOLR engine](https://agentprime.io/advisories/CVE-2026-50022.md)
  `CVE-2026-50022` · CVE record: NCEAS metacat · CVSS 5.8 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-441
- [Nuxt OG Image has unauthenticated SSRF via \`fonts\[\].path\` URL parameter](https://agentprime.io/advisories/GHSA-q8hw-4fvp-9rwv.md)
  `GHSA-q8hw-4fvp-9rwv`, `CVE-2026-61793` · npm `nuxt-og-image`: affected `>=6.0.2, <6.7.0`, fixed in `6.7.0` · CVSS 6.9 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Server-side request forgery (SSRF), CWE-20, CWE-441, CWE-749
- [Google Chrome: Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47…](https://agentprime.io/advisories/CVE-2026-91742.md)
  `CVE-2026-91742` · CVE record: Google Chrome · CVSS 4.8 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-441
- [In platform_msg_handler_init of default_msg_handlers.c, there is a possible confused deputy due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-58739.md)
  `CVE-2026-58739` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-441
- [In ap_pmic_poll_msg_handler of ap_pmic_ipc.c, there is a possible permission bypass due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-58698.md)
  `CVE-2026-58698` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-441
- [In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-57042.md)
  `CVE-2026-57042` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-441
- [In multiple files, there is a possible permission bypass due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-56992.md)
  `CVE-2026-56992` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-441
- [In multiple files, there is a possible out-of-bounds read due to type confusion.](https://agentprime.io/advisories/CVE-2026-56986.md)
  `CVE-2026-56986` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-441
- [In multiple files, there is a possible way to obtain signatures due to type confusion.](https://agentprime.io/advisories/CVE-2026-56985.md)
  `CVE-2026-56985` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-441
- [Out-of-bounds write in Google Android](https://agentprime.io/advisories/CVE-2026-56945.md)
  `CVE-2026-56945` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: Memory corruption, CWE-441
- [In CPM, there is a possible permission bypass due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-56922.md)
  `CVE-2026-56922` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-441
- [In gmc_mb_msg_handler of gmc_mba.c, there is a possible memory corruption due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-56879.md)
  `CVE-2026-56879` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-441
- [In CPM, there is a possible information disclosure due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-0183.md)
  `CVE-2026-0183` · CVE record: Google Android · CVSS 4.4 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-441
- [Hawtio-operator: hawtio-operator: routes/custom-host confused-deputy via spec.routehostname](https://agentprime.io/advisories/CVE-2026-81303.md)
  `CVE-2026-81303` · CVE record: Red Hat Red Hat build of Apache Camel - HawtIO 4 · CVSS 6.3 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-441
- [A type confusion issue was addressed with improved memory handling.](https://agentprime.io/advisories/CVE-2026-84616.md)
  `CVE-2026-84616` · CVE record: Apple iOS and iPadOS and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: CWE-441
- [Google Chrome: Confused deputy in Fullscreen in Google Chrome prior to 153.0.8010.36 allowed a remote…](https://agentprime.io/advisories/CVE-2026-87502.md)
  `CVE-2026-87502` · CVE record: Google Chrome · CVSS 4.2 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-441
- [Google Chrome: Confused deputy in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote…](https://agentprime.io/advisories/CVE-2026-87582.md)
  `CVE-2026-87582` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-441
- [Google Chrome: Confused deputy in Prerender in Google Chrome prior to 153.0.8010.36 allowed a remote…](https://agentprime.io/advisories/CVE-2026-87442.md)
  `CVE-2026-87442` · CVE record: Google Chrome · CVSS 3.1 Low · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-441
- [Google Chrome: Confused deputy in BackgroundFetch in Google Chrome prior to 153.0.8010.36 allowed a…](https://agentprime.io/advisories/CVE-2026-87453.md)
  `CVE-2026-87453` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-441
- [In onAttach of BiometricsSettingsBase.java, there is a possible authentication bypass due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-45520.md)
  `CVE-2026-45520` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-441
- [In screenArgsForPermissionCheckIfAny of multiple locations there is a possible risk of unauthorized access due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-45519.md)
  `CVE-2026-45519` · CVE record: Google Android · CVSS 3.3 Low · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-441
- [In onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible unauthorized URI permission grant due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-28657.md)
  `CVE-2026-28657` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-441
- [In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission bypass due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-28644.md)
  `CVE-2026-28644` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-441
- [In setupLayout of PickActivity.java, there is a possible bypass of the "Install unknown apps" security restriction due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-28636.md)
  `CVE-2026-28636` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-441
- [In multiple locations, there is a possible read/write access to files without the proper permissions due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-28624.md)
  `CVE-2026-28624` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-441
- [In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy.](https://agentprime.io/advisories/CVE-2026-28616.md)
  `CVE-2026-28616` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-441
- [In onCreate of SlicePermissionActivity.java, there is a possible permission bypass due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-28614.md)
  `CVE-2026-28614` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-441
- [In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-28607.md)
  `CVE-2026-28607` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-441
- [In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible read/write access to private files due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-28603.md)
  `CVE-2026-28603` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-441
- [In onCreate of PaymentDefaultDialog.java, there is a possible way to change default payment app due to a confused deputy.](https://agentprime.io/advisories/CVE-2026-28600.md)
  `CVE-2026-28600` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-441
- [Microsoft Windows Speech Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-69531.md)
  `CVE-2026-69531` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-441
- [NLTK: pathsec SSRF protection can be bypassed when a proxy is configured](https://agentprime.io/advisories/GHSA-6ww7-3frv-cqxh.md)
  `GHSA-6ww7-3frv-cqxh`, `CVE-2026-78682`, `PYSEC-2026-3733` · PyPI `nltk`: affected `<3.10.3`, fixed in `3.10.3` · CVSS 8.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: Server-side request forgery (SSRF), CWE-441
- [Workload identity attestation generated before login host validation in Snowflake drivers](https://agentprime.io/advisories/CVE-2026-86600.md)
  `CVE-2026-86600` · CVE record: Snowflake Snowflake Connector for Python and 4 more · CVSS 8.2 High · Not analysed yet · Published 8 Sept 2026 · Tags: Hard-coded credentials, CWE-441
- [Sim before 0.8.14 Confused Deputy in Tool URL Routing Mints an Internal Token for a User-Supplied /api/ Path](https://agentprime.io/advisories/CVE-2026-86115.md)
  `CVE-2026-86115` · CVE record: simstudioai sim · CVSS 5.3 Medium · Not analysed yet · Published 5 Sept 2026 · Tags: CWE-441
- [Google Chrome: Confused deputy in CredentialProvider in Google Chrome on on Windows prior to…](https://agentprime.io/advisories/CVE-2026-84329.md)
  `CVE-2026-84329` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: CWE-441
- [Server-side request forgery in SonicWall SMA1000](https://agentprime.io/advisories/CVE-2026-83548.md)
  `CVE-2026-83548` · CVE record: SonicWall SMA1000 · CVSS 10.0 Critical · Critical (KEV, CVSS 9+) · In CISA KEV · Not analysed yet · Published 1 Sept 2026 · Tags: Server-side request forgery (SSRF), CWE-441
- [Wallos incomplete fix for CVE-2026-33407: unauthenticated httpoxy SSRF still reachable via \`endpoints/payments/search.php\`](https://agentprime.io/advisories/CVE-2026-77348.md)
  `CVE-2026-77348` · CVE record: ellite Wallos · CVSS 8.2 High · Not analysed yet · Published 31 Aug 2026 · Tags: Server-side request forgery (SSRF), CWE-441, CWE-1188
- [Multicloud-operators-subscription: multicloud-operators-subscription: helmrelease chart applied with controller sa without gvk or namespace restriction](https://agentprime.io/advisories/CVE-2026-67567.md)
  `CVE-2026-67567` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-441
- [MagicMirror: ssrf calendar .js](https://agentprime.io/advisories/GHSA-w6x9-28jw-hq7j.md)
  `GHSA-w6x9-28jw-hq7j`, `CVE-2026-63643` · npm `magicmirror`: affected `<2.37.0`, fixed in `2.37.0` · CVSS 6.3 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Server-side request forgery (SSRF), CWE-441
- [Unintended Proxy or Intermediary in Elastic Cloud on Kubernetes Leading to Cross-Namespace Secret Disclosure](https://agentprime.io/advisories/CVE-2026-72640.md)
  `CVE-2026-72640` · CVE record: Elastic Eck Operator · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: CWE-441
- [Clusterclaims-controller: confused deputy: tenant-controlled clusterclaim labels propagated to managedcluster, enabling cross-tenant managedclusterset join](https://agentprime.io/advisories/CVE-2026-73266.md)
  `CVE-2026-73266` · CVE record: Red Hat multicluster engine for Kubernetes 2.10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 13 Aug 2026 · Tags: CWE-441
- [Multicloud-integrations: multicloud-integrations: gitopscluster.spec.argoserver.argonamespace writes spoke bearer tokens to attacker-chosen namespace](https://agentprime.io/advisories/CVE-2026-70398.md)
  `CVE-2026-70398` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Aug 2026 · Tags: CWE-441
- [Multicloud-integrations: multicloud-integrations: pull-model propagation allows hub tenant to target arbitrary spoke cluster via unvalidated ocm-managed-cluster annotation](https://agentprime.io/advisories/CVE-2026-72526.md)
  `CVE-2026-72526` · CVE record: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 and 4 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Aug 2026 · Tags: CWE-441
- [Sub2API: Path traversal in the Responses subpath routes lets an authenticated tenant relay requests to arbitrary upstream endpoints using pooled account credentials](https://agentprime.io/advisories/CVE-2026-73079.md)
  `CVE-2026-73079` · CVE record: Wei-Shaw sub2api · CVSS 8.5 High · Not analysed yet · Published 11 Aug 2026 · Tags: Path traversal, CWE-441
- [Odh-model-controller: odh-model-controller: cross-namespace secret read via nim account crd confused deputy](https://agentprime.io/advisories/CVE-2026-16456.md)
  `CVE-2026-16456` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-441

Newest: <https://agentprime.io/advisories/tag/cwe-441.md>
Older: <https://agentprime.io/advisories/tag/cwe-441.md?cursor=WyIyMDI2LTA4LTEwVDIwOjQ0OjI1LjE5MzAwMFoiLCJDVkUtMjAyNi0xNjQ1NiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-441&cursor=WyIyMDI2LTEwLTA1VDE4OjM5OjIyLjk0OTAwMFoiLCJDVkUtMjAyNi0yODY0OCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-441/?cursor=WyIyMDI2LTEwLTA1VDE4OjM5OjIyLjk0OTAwMFoiLCJDVkUtMjAyNi0yODY0OCJd>. Everything for agents: <https://agentprime.io/llms.txt>.