# CWE-807.

Every Advisory and CVE whose sources give the weakness CWE-807, newest first.

## Records, newest first

- [Multiple Vulnerabilities in IBM API Connect](https://agentprime.io/advisories/CVE-2026-17167.md)
  `CVE-2026-17167` · CVE record: IBM API Connect · CVSS 4.3 Medium · Not analysed yet · Published 7 Nov 2026 · Tags: CWE-807
- [Remark42: Rate limit bypass via unconditional trust of X-Forwarded-For/X-Real-IP headers in direct-internet deployment](https://agentprime.io/advisories/CVE-2026-77463.md)
  `CVE-2026-77463` · CVE record: umputun remark42 · CVSS 6.5 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: CWE-348, CWE-807
- [Unvalidated parent-supplied AWS Region in AWS aws-nitro-enclaves-sdk-c allows impersonation of the enclave's AWS KMS endpoint](https://agentprime.io/advisories/CVE-2026-119148.md)
  `CVE-2026-119148` · CVE record: AWS aws-nitro-enclaves-sdk-c · CVSS 8.2 High · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-807
- [Authlib: ID token can disable its own nonce validation via the nonce_supported claim](https://agentprime.io/advisories/GHSA-c5mf-xmp2-59rc.md)
  `GHSA-c5mf-xmp2-59rc`, `CVE-2026-114617`, `PYSEC-2026-4357` · PyPI `authlib`: affected `<1.9.0`, fixed in `1.9.0` · CVSS 4.2 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass, CWE-807
- [yudao-cloud through 2026.09 Data Permission Bypass via data-permission-enable Header](https://agentprime.io/advisories/CVE-2026-116016.md)
  `CVE-2026-116016` · CVE record: YunaiV yudao-cloud · CVSS 7.1 High · Not analysed yet · Published 24 Oct 2026 · Tags: CWE-807
- [Possible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent.](https://agentprime.io/advisories/CVE-2026-50106.md)
  `CVE-2026-50106` · CVE record: NLnet Labs Unbound · CVSS 6.5 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-807
- [AIOHTTP: Absolute-form request targets can spoof Request.scheme](https://agentprime.io/advisories/GHSA-f9xw-jh8m-3mwq.md)
  `GHSA-f9xw-jh8m-3mwq`, `CVE-2026-111748` · PyPI `aiohttp`: affected `<3.14.4`, fixed in `3.14.4` · CVSS 6.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-807
- [makeplane API Endpoint reliance on untrusted inputs in a security decision](https://agentprime.io/advisories/CVE-2026-111869.md)
  `CVE-2026-111869` · CVE record: makeplane plane · CVSS 6.9 Medium · Not analysed yet · Published 18 Oct 2026 · Tags: CWE-20, CWE-807
- [Microsoft Office Word Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-108433.md)
  `CVE-2026-108433` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 7.8 High · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-807
- [Resource allocation without limits in Eclipse Foundation Eclipse Connected Services Platform](https://agentprime.io/advisories/CVE-2026-110726.md)
  `CVE-2026-110726` · CVE record: Eclipse Foundation Eclipse Connected Services Platform · CVSS 6.5 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Denial of service, CWE-348, CWE-807
- [util-linux LIBMOUNT_FORCE_MOUNT2 allows nosuid and noexec bypass](https://agentprime.io/advisories/CVE-2026-53614.md)
  `CVE-2026-53614` · CVE record: util-linux util-linux · CVSS 7.0 High · Not analysed yet · Published 14 Oct 2026 · Tags: Privilege escalation, CWE-807
- [Gitea required Actions check bypass through skipped workflows](https://agentprime.io/advisories/CVE-2026-66874.md)
  `CVE-2026-66874` · CVE record: Gitea Gitea · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Broken access control, CWE-345, CWE-693, CWE-807
- [Microsoft PowerShell Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-96251.md)
  `CVE-2026-96251` · CVE record: Microsoft PowerShell 7.4 and 2 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-807
- [Microsoft Office Word Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-88210.md)
  `CVE-2026-88210` · CVE record: Microsoft Microsoft 365 Apps for Enterprise and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-807
- [Windows IKE Extension Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-83522.md)
  `CVE-2026-83522` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-807
- [Microsoft PowerShell Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-85817.md)
  `CVE-2026-85817` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-807
- [Visual Studio Code Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-102234.md)
  `CVE-2026-102234` · CVE record: Microsoft Visual Studio Code · CVSS 7.4 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-807
- [Reliance on Untrusted Inputs in a Security Decision in GitLab](https://agentprime.io/advisories/CVE-2026-105458.md)
  `CVE-2026-105458` · CVE record: GitLab GitLab · CVSS 4.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-807
- [pH7Builder before 19.3.0 CAPTCHA Bypass via Client-Chosen Form ID](https://agentprime.io/advisories/CVE-2026-108903.md)
  `CVE-2026-108903` · CVE record: ph7software ph7builder · CVSS 6.9 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: CWE-807
- [Reliance on Untrusted Inputs in a Security Decision in hMailServer](https://agentprime.io/advisories/CVE-2026-104658.md)
  `CVE-2026-104658` · CVE record: Progressive Robot Ltd hMailServer · CVSS 7.8 High · Not analysed yet · Published 8 Oct 2026 · Tags: CWE-807
- [KaTeX: Existing prototype pollution can bypass trust restrictions](https://agentprime.io/advisories/GHSA-238p-pmpm-9mq7.md)
  `GHSA-238p-pmpm-9mq7`, `CVE-2026-103923` · npm `katex`: affected `>=0.11.0, <0.18.2`, fixed in `0.18.2` · CVSS 2.1 Low · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-807
- [Ghost 0.5.0 before 6.62.0 Arbitrary Email Registration via Staff Invite](https://agentprime.io/advisories/CVE-2026-103267.md)
  `CVE-2026-103267` · CVE record: TryGhost Ghost · CVSS 5.3 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-807
- [Genians, Inc Genian NAC/ZTNA Remote Code Execution](https://agentprime.io/advisories/CVE-2026-76147.md)
  `CVE-2026-76147` · CVE record: Genians, Inc Genian NAC 4.0.175 Release and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Path traversal, Broken access control, CWE-807
- [Kiteworks Core Remote Code Execution](https://agentprime.io/advisories/CVE-2026-102117.md)
  `CVE-2026-102117` · CVE record: Kiteworks Core · CVSS 7.2 High · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-807, CWE-940
- [deepseek-ai deepseek-harness dsh index.ts reliance on untrusted inputs in a security decision](https://agentprime.io/advisories/CVE-2026-101131.md)
  `CVE-2026-101131` · CVE record: deepseek-ai deepseek-harness · CVSS 4.8 Medium · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-20, CWE-807
- [agentverus agentverus-scanner context.js isSecurityDefenseSkill reliance on untrusted inputs in a security decision](https://agentprime.io/advisories/CVE-2026-101079.md)
  `CVE-2026-101079` · CVE record: agentverus agentverus-scanner · CVSS 2.4 Low · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-20, CWE-807
- [authentik: MFA Bypass via State Confusion / Parameter Injection in AuthenticatorEmailStage](https://agentprime.io/advisories/CVE-2026-94606.md)
  `CVE-2026-94606` · CVE record: goauthentik authentik · CVSS 8.9 High · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass, CWE-807
- [Automation-controller: automation-controller-container: automation-controller: view_jobtemplate to execute privilege escalation via host_config_key exposure and x-forwarded-for spoofing of provisioni…](https://agentprime.io/advisories/CVE-2026-84474.md)
  `CVE-2026-84474` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 8 and 4 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-807
- [9Router has a Login Brute-Force Lockout Bypass via Spoofable X-9r-Real-Ip Header](https://agentprime.io/advisories/GHSA-32gc-64m7-hj7v.md)
  `GHSA-32gc-64m7-hj7v`, `CVE-2026-56682` · npm `9router`: affected `<0.5.8`, fixed in `0.5.8` · CVSS 5.3 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Authentication bypass, CWE-807
- [9Router has an Authentication Bypass in Public LLM API via Spoofable X-9r-Real-Ip Header](https://agentprime.io/advisories/GHSA-5mj8-gf6m-fhw8.md)
  `GHSA-5mj8-gf6m-fhw8`, `CVE-2026-56681` · npm `9router`: affected `<0.5.8`, fixed in `0.5.8` · CVSS 7.3 High · Not analysed yet · Published 22 Sept 2026 · Tags: CWE-807
- [Mailu: Authentication bypass in header-based proxy authentication via spoofable \`X-Forwarded-By\` trust](https://agentprime.io/advisories/CVE-2026-85751.md)
  `CVE-2026-85751` · CVE record: Mailu Mailu and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Sept 2026 · Tags: Authentication bypass, CWE-807
- [Temporal Server completion callback source header can direct attacker-chosen requests to the internal frontend with administrator authorization](https://agentprime.io/advisories/CVE-2026-87858.md)
  `CVE-2026-87858` · CVE record: Temporal Technologies, Inc. Temporal Server · CVSS 7.2 High · Not analysed yet · Published 21 Sept 2026 · Tags: CWE-807
- [SysReptor: Host header injection might allow account takeover](https://agentprime.io/advisories/CVE-2026-81179.md)
  `CVE-2026-81179` · CVE record: Syslifters sysreptor · CVSS 8.1 High · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-807
- [pgAdmin 4: Authentication bypass via a client-controlled identity header in Webserver authentication mode](https://agentprime.io/advisories/CVE-2026-86863.md)
  `CVE-2026-86863` · CVE record: pgadmin.org pgAdmin 4 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Authentication bypass, CWE-807
- [Admission Control Bypass via Hardcoded Sidecar Image Exemption](https://agentprime.io/advisories/CVE-2026-78427.md)
  `CVE-2026-78427` · CVE record: SUSE github.com/neuvector/neuvector · CVSS 5.3 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-807
- [Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass in Module Context in the Contact, Opt-in and Form Builder Addons in SP Page Builder Pro 3.2.6 - 5.6.1p2 and 6.0.0 - 6.9.0](https://agentprime.io/advisories/CVE-2026-79701.md)
  `CVE-2026-79701` · CVE record: joomshaper.com SP Page Builder (Pro) extension for Joomla · CVSS 6.9 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: CWE-807
- [Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass via Request-Controlled CAPTCHA Configuration in SP Page Builder Pro 5.1.4 - 6.9.0](https://agentprime.io/advisories/CVE-2026-79700.md)
  `CVE-2026-79700` · CVE record: joomshaper.com SP Page Builder (Pro) extension for Joomla · CVSS 6.9 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: CWE-807
- [Traefik entrypoint header-name sanitization bypassed via request trailers](https://agentprime.io/advisories/GHSA-v67p-phpq-fc8x.md)
  `GHSA-v67p-phpq-fc8x`, `CVE-2026-88004`, `GO-2026-6467` · Go `github.com/traefik/traefik/v3`: affected `>=3.2.0, <3.7.13`, fixed in `3.7.13` · CVSS 7.0 High · Not analysed yet · Published 10 Sept 2026 · Tags: CWE-436, CWE-807
- [webhookd: Unrestricted HTTP Header to Shell Variable Injection](https://agentprime.io/advisories/GHSA-v25g-mvwr-f5fp.md)
  `GHSA-v25g-mvwr-f5fp`, `CVE-2026-59157`, `GO-2026-6451` · Go `github.com/ncarlier/webhookd`: affected `<1.22.0`, fixed in `1.22.0` · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Authentication bypass, CWE-807
- [Google Chrome: Insufficient policy enforcement in Extensions in Google Chrome prior to 153.0.8010.36…](https://agentprime.io/advisories/CVE-2026-87479.md)
  `CVE-2026-87479` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-807
- [DeepSeek Harness contains an authentication bypass vulnerability in local HTTP control-plane API](https://agentprime.io/advisories/GHSA-8m2g-8cgm-3vcp.md)
  `GHSA-8m2g-8cgm-3vcp`, `CVE-2026-82533` · npm `@deepseek-ai/dsh-client-connection`: affected `<0.1.2-alpha.1`, fixed in `0.1.2-alpha.1` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-807
- [Improper Access Control in SAP NetWeaver (SAP GUI for Java)](https://agentprime.io/advisories/CVE-2026-66768.md)
  `CVE-2026-66768` · CVE record: SAP_SE SAP NetWeaver (SAP GUI for Java) · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-807
- [Grav Form Plugin before 9.1.20 reCAPTCHA v3 Authentication Bypass](https://agentprime.io/advisories/CVE-2026-85602.md)
  `CVE-2026-85602` · CVE record: getgrav grav-plugin-form · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2026 · Tags: CWE-807
- [Apache APISIX: attach-consumer-label does not strip client-supplied consumer-label headers](https://agentprime.io/advisories/CVE-2026-63041.md)
  `CVE-2026-63041` · CVE record: Apache Software Foundation Apache APISIX · CVSS 5.3 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: CWE-807
- [authentik: Authentication Flow Bypass via Unguarded challenge_valid() in AuthenticatorEndpointGDTCStage and GoogleChromeStageView](https://agentprime.io/advisories/CVE-2026-54730.md)
  `CVE-2026-54730` · CVE record: goauthentik authentik · CVSS 8.6 High · Not analysed yet · Published 18 Aug 2026 · Tags: Broken access control, CWE-807
- [rsync < 3.5.0 Arbitrary File Deletion via Malicious File List](https://agentprime.io/advisories/CVE-2026-53789.md)
  `CVE-2026-53789` · CVE record: RsyncProject rsync · CVSS 7.1 High · Not analysed yet · Published 13 Aug 2026 · Tags: CWE-807
- [Mira Hormone Monitor, Mira Android App Reliance on untrusted inputs in a security decision](https://agentprime.io/advisories/CVE-2026-64934.md)
  `CVE-2026-64934` · CVE record: Quanovate Tech Inc. (operating as Mira / Mira Care) Mira Firmware and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-807
- [Snipe-IT Checkout Request Cancellation IDOR](https://agentprime.io/advisories/CVE-2026-19579.md)
  `CVE-2026-19579` · CVE record: Grokability Snipe-IT · CVSS 5.3 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Broken access control, CWE-807
- [Improper Authorization in MongoDB Atlas Vector Search Allows Unauthorized Access to Protected View Data](https://agentprime.io/advisories/CVE-2026-18705.md)
  `CVE-2026-18705` · CVE record: MongoDB MongoDB Server · CVSS 7.1 High · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-807
- [Multiple vulnerabilities in SAP Business AI Platform (Approuter)](https://agentprime.io/advisories/CVE-2026-58239.md)
  `CVE-2026-58239` · CVE record: SAP_SE SAP Business AI Platform (Approuter) · CVSS 3.7 Low · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-807
- [Reliance on Untrusted Inputs in a Security Decision vulnerabilities in Model Context Protocol features](https://agentprime.io/advisories/CVE-2026-9077.md)
  `CVE-2026-9077` · CVE record: IBM Langflow OSS · CVSS 8.5 High · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-807
- [Telenia TVox 26.5.3 Authentication Bypass via set_env.php](https://agentprime.io/advisories/CVE-2026-64827.md)
  `CVE-2026-64827` · CVE record: Telenia Software TVox · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: CWE-807
- [Improper Validation of Client-Supplied Command Parameters Allowing Role-Based Access Control Bypass](https://agentprime.io/advisories/CVE-2026-13059.md)
  `CVE-2026-13059` · CVE record: MongoDB MongoDB Server · CVSS 8.6 High · Not analysed yet · Published 22 Jul 2026 · Tags: CWE-807
- [Keycloak-services: keycloak-services: required signed-jwt assertion policy can be bypassed with unsigned assertion headers](https://agentprime.io/advisories/CVE-2026-16093.md)
  `CVE-2026-16093` · CVE record: Red Hat Red Hat build of Keycloak 26.6 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: CWE-807
- [Insufficient verification of data authenticity in Eclipse Foundation Eclipse Kura](https://agentprime.io/advisories/CVE-2026-9561.md)
  `CVE-2026-9561` · CVE record: Eclipse Foundation Eclipse Kura · CVSS 8.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-345, CWE-348, CWE-807
- [OpenClaw: Skill Workshop apply flow could override pending approval](https://agentprime.io/advisories/GHSA-cqwv-9qjx-vxw2.md)
  `GHSA-cqwv-9qjx-vxw2`, `CVE-2026-53808` · npm `openclaw`: affected `<2026.5.6`, fixed in `2026.5.6` · CVSS 6.0 Medium · Not analysed yet · Published 2 Jul 2026 · Tags: Broken access control, CWE-807
- [Blocky DNSSEC validation bypass and validation-cache scope pollution](https://agentprime.io/advisories/GHSA-x845-2f78-7v36.md)
  `GHSA-x845-2f78-7v36`, `GO-2026-5745` · Go `github.com/0xERR0R/blocky`: affected `>=0.28.0, <0.32.0`, fixed in `0.32.0` · CVSS 8.6 High · Not analysed yet · Published 19 Jun 2026 · Tags: CWE-346, CWE-807
- [OpenClaw: BlueBubbles sender policy could match mutable conversation identifiers](https://agentprime.io/advisories/GHSA-8j37-5w68-wj2g.md)
  `GHSA-8j37-5w68-wj2g`, `CVE-2026-53860` · npm `openclaw`: affected `<2026.5.7`, fixed in `2026.5.7` · CVSS 2.3 Low · Not analysed yet · Published 18 Jun 2026 · Tags: Broken access control, CWE-807
- [pam_usb: getenv() used in PAM context allows environment variable injection into local-check logic](https://agentprime.io/advisories/CVE-2026-48980.md)
  `CVE-2026-48980` · CVE record: mcdope pam_usb · CVSS 6.3 Medium · Not analysed yet · Published 18 Jun 2026 · Tags: CWE-454, CWE-807
- [Duplicate Advisory: BlueBubbles sender policy could match mutable conversation identifiers](https://agentprime.io/advisories/GHSA-8hj2-w4c9-fjfq.md)
  `GHSA-8hj2-w4c9-fjfq` · npm `openclaw`: affected `<=2026.5.6`, no fixed version yet · CVSS 4.2 Medium · Withdrawn · Not analysed yet · Published 16 Jun 2026 · Tags: CWE-807

Older: <https://agentprime.io/advisories/tag/cwe-807.md?cursor=WyIyMDI2LTA2LTE2VDIxOjMyOjAwLjAwMDAwMFoiLCJHSFNBLThoajItdzRjOS1mamZxIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-807>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-807/>. Everything for agents: <https://agentprime.io/llms.txt>.