CWE-441.

Datadog Android App: In versions of the Datadog Android application prior to v545-5.9.2…

• Datadog Android App
• CWE-441

Cross-Cluster Impersonation Confused-Deputy Privilege Escalation

• SUSE Rancher
• Information disclosure
• CWE-441

swagger-typescript-api vulnerable to Server-Side Request Forgery via spec `$ref`

• Server-side request forgery (SSRF)
• CWE-20

<13.12.2 · fixed in 13.12.2

java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor

• Server-side request forgery (SSRF)
• CWE-441

>=8.2.1, <10.1.1 · fixed in 10.1.1

Cluster-proxy: impersonation-header injection grants cluster-admin on every managed cluster

• Red Hat multicluster engine for Kubernetes 2.10
• Red Hat multicluster engine for Kubernetes 2.11
• CWE-441

Unintended Proxy or Intermediary in Panduit IntraVUE by Pronetiqs

• Pronetiqs Panduit Intravue
• CWE-441

MongoDB mongos Improper Validation of Internal Flags in Queryable Encryption Write Commands on Sharded Clusters

• MongoDB Server
• CWE-441

Sparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection

• Sparkle
• Authentication bypass
• CWE-441

Astro: Unauthenticated path override in the @astrojs/vercel ISR function

• Broken access control
• CWE-441

>=10.0.3, <11.0.3 · fixed in 11.0.3

@fastify/reply-from vulnerable to cross-upstream request routing via URL cache key collision

• @fastify/reply-from
• CWE-441

Anyquery: Server-Side Request Forgery (SSRF) via Unrestricted SQLite Virtual Table Modules in Server Mode

• Broken access control
• Server-side request forgery (SSRF)

* · no fixed version yet

Input Validation Vulnerabilities in Snowflake Spark Connector

• Snowflake Spark Connector
• SQL injection
• Server-side request forgery (SSRF)

Cross-Tenant Data Exfiltration in Apigee via BigQuery Confused Deputy

• Google Cloud Apigee
• CWE-441
• CWE-610

@better-auth/sso provider registration has server-side request forgery via unvalidated OIDC endpoints

• Server-side request forgery (SSRF)
• CWE-20

>=0.1.0, <1.6.11 · fixed in 1.6.11

Better Auth vulnerable to unauthorized invitation acceptance via unverified email match in organization plugin

• Authentication bypass
• Broken access control

<1.6.11 · fixed in 1.6.11

Coder's subdomain workspace app routing trusts unauthenticated X-Forwarded-Host header, enabling cross-app data access

• CWE-345
• CWE-441

<2.29.17 || >=2.30.0, <2.32.7 || >=2.33.0, <2.33.8 || >=2.34.0, <2.34.2 · fixed in 2.29.17, 2.32.7, 2.33.8, 2.34.2

Apache Camel-Dapr: The Dapr Pub/Sub consumer copied the inbound CloudEvent's pub/sub-name and topic into producer-direction routing headers

• CWE-20
• CWE-441

>=4.12.0, <4.14.8 || >=4.15.0, <4.18.3 || >=4.19.0, <4.21.0 · fixed in 4.14.8, 4.18.3, 4.21.0

Apache Camel-CXF: The SOAP operation-selection headers used non-Camel-prefixed names (operationName, operationNamespace) that bypass the HTTP header filter, allowing an HTTP client to redirect the invoked SOAP operation

• CWE-20
• CWE-441

>=4.0.0, <4.14.8 || >=4.15.0, <4.18.3 || >=4.19.0, <4.21.0 · fixed in 4.14.8, 4.18.3, 4.21.0

Fission: Cross-namespace Environment reference in Package allows build-time command execution and SA token exfiltration

• Broken access control
• CWE-441

<1.24.0 · fixed in 1.24.0

Strimzi: Cross-namespace privilege escalation via `Kafka.spec.entityOperator`

• Privilege escalation
• CWE-441

<1.0.1 · fixed in 1.0.1

webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies

• CWE-346
• CWE-441

<5.2.5 · fixed in 5.2.5

NocoDB: Server-Side Request Forgery via Spreadsheet Import Endpoint

• Server-side request forgery (SSRF)
• CWE-441

<=0.301.3 · no fixed version yet

PyJWKClient: missing scheme allowlist enables CVE-2024-21643-class SSRF + token forgery via file://, ftp://, data: schemes

• Server-side request forgery (SSRF)
• CWE-441

>=2.0.0, <2.13.0 · fixed in 2.13.0

Angular Service Worker Policy-Bypass & Credential-Stripping Vulnerabilities

• Information disclosure
• CWE-441

<=18.2.14 || >=19.0.0-next.0, <19.2.23 || >=20.0.0-next.0, <20.3.22 || >=21.0.0-next.0, <21.2.15 || >=22.0.0-next.0, <22.0.0-rc.2 · fixed in 19.2.23, 20.3.22, 21.2.15, 22.0.0-rc.2

Radius Controller May Delete a Container Resource via an Injected Deployment Annotation (Multi-Tenant Installs)

• CWE-20
• CWE-441

<0.58.0 · fixed in 0.58.0

Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic

• Path traversal
• Information disclosure

<1.6.6 || >=1.7.0, <1.7.3 · fixed in 1.6.6, 1.7.3

Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 allows UPnP AddPortMapping to forward external ports to the router's own admin interface by accepting its own IP (192.168.1.1) or local…

• CWE-441

In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a confused deputy.

• Google Android
• CWE-441

In multiple functions of PipTaskOrganizer.java, there is a possible way to launch an activity from the background due to a confused deputy.

• Google Android
• CWE-441

axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`

• Broken access control
• Prototype pollution

>=1.0.0, <1.16.0 · fixed in 1.16.0

Unintended Proxy or Intermediary ('Confused Deputy') in GitLab

• GitLab
• CWE-441

Duplicate Advisory: OpenClaw: Workspace dotenv files cannot override connector endpoint hosts

• CWE-441

<2026.4.22 · fixed in 2026.4.22

Duplicate Advisory: OpenClaw: Workspace dotenv MiniMax host override could redirect credentialed requests

• CWE-441

>=2026.4.5, <2026.4.20 · fixed in 2026.4.20

GrapheneOS: GrapheneOS before 2026050400 allows attackers to discover the real IP address of a VPN…

• GrapheneOS
• CWE-441

Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0

• Server-side request forgery (SSRF)
• CWE-183

<0.31.1 || >=1.0.0, <1.15.1 · fixed in 0.31.1, 1.15.1

pyload-ng: non-admin SETTINGS users can redirect all outbound traffic through an attacker-controlled proxy via unrestricted `proxy.*` config (incomplete fix for CVE-2026-33509 / -35463 / -35464 / -35586)

• Broken access control
• Server-side request forgery (SSRF)

<0.5.0b3.dev100 · fixed in 0.5.0b3.dev100

OpenClaw: Workspace dotenv files cannot override connector endpoint hosts

• CWE-427
• CWE-441

<2026.4.22 · fixed in 2026.4.22

Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting

• MIYAGAWA Plack::Middleware::XSendfile
• Information disclosure
• CWE-441

Duplicate Advisory: OpenClaw: MSTeams thread history bypasses sender allowlist via Graph API

• CWE-441

<2026.3.31 · fixed in 2026.3.31

OpenClaw: Workspace dotenv MiniMax host override could redirect credentialed requests

• Hard-coded credentials
• CWE-15

>=2026.4.5, <2026.4.20 · fixed in 2026.4.20

Kratos has a Confused Deputy issue

• CWE-441

<=2.9.2 · no fixed version yet

Kofax Capture 6.0.0.0 Unauthenticated File Read/Write & SMB Coercion via .NET Remoting

• Tungsten Automation Tungsten Capture (formerly Kofax Capture)
• Authentication bypass
• CWE-441

Unisys WebPerfect Image Suite 3.0 NTLMv2 Hash Leakage via .NET Remoting

• Unisys WebPerfect Image Suite
• CWE-441

kyverno apicall servicecall implicit bearer token injection leaks kyverno serviceaccount token

• Information disclosure
• CWE-441

<1.17.0 · fixed in 1.17.0

Aiven Operator has cross-namespace secret exfiltration via ClickhouseUser connInfoSecretSource

• Privilege escalation
• CWE-441

>=0.31.0, <0.37.0 · fixed in 0.37.0

Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF

• Server-side request forgery (SSRF)
• CWE-441

<0.31.0 || >=1.0.0, <1.15.0 · fixed in 0.31.0, 1.15.0

OpenClaw: MSTeams thread history bypasses sender allowlist via Graph API

• Broken access control
• CWE-441

<2026.3.31 · fixed in 2026.3.31

FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities

• CWE-441

<3.2.0 · fixed in 3.2.0

Astro: Unauthenticated Path Override via `x-astro-path` / `x_astro_path`

• Broken access control
• CWE-441

<10.0.2 · fixed in 10.0.2

In gmc_ddr_handle_mba_mr_req of gmc_mba_ddr.c, there is a possible escalation of privileges due to a confused deputy.

• Google Android
• CWE-441

OliveTin's RestartAction always runs actions as guest

• Privilege escalation
• CWE-441

<0.0.0-20260305000458-cb46a597b246 · fixed in 0.0.0-20260305000458-cb46a597b246

OpenClaw Vulnerable to Remote Code Execution via Node Invoke Approval Bypass in Gateway

• Broken access control
• CWE-20

<2026.2.14 · fixed in 2026.2.14

In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible cross-user permission bypass due to a confused deputy.

• Google Android
• CWE-441

In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confused deputy.

• Google Android
• CWE-441

In multiple functions of FaceEnroll.kt, there is a possible privilege escalation due to a confused deputy.

• Google Android
• CWE-441

In executeRequest of ActivityStarter.java, there is a possible launch anywhere due to a confused deputy.

• Google Android
• CWE-441

In multiple functions of MediaProvider.java, there is a possible external storage write permission bypass due to a confused deputy.

• Google Android
• CWE-441

Coturn: IPv4-mapped IPv6 (::ffff:0:0/96) bypasses denied-peer-ip ACL

• coturn
• Broken access control
• CWE-441

An unintended proxy or intermediary in the AMD power management firmware (PMFW) could allow a privileged attacker to send malformed messages to the system management unit (SMU) potentially resulting…

• AMD Instinct™ MI210
• AMD Instinct™ MI250
• CWE-441

Skipper Ingress Controller Allows Unauthorized Access to Internal Services via ExternalName in github.com/zalando/skipper

• Server-side request forgery (SSRF)
• CWE-441

<0.24.0 · fixed in 0.24.0