Lavish: DNS rebinding allows any website to read arbitrary local files and inject prompts into the AI agent via the unauthenticated local server

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

Lavish is the new editor for your HTML artifacts. Prior to 0.1.43, the lavish-axi loopback HTTP server did not authenticate requests or validate Host and Origin values on session, artifact, prompt, and polling routes. A website visited while the server is running can use DNS rebinding to send same-origin browser requests to the local service. POST /api/sessions accepts a caller-selected file path and returns its deterministic session key; GET /artifact/:key/index.html then returns the file contents, allowing disclosure of any file readable by the server process without an existing session. An attacker can also queue text through POST /api/:key/prompts for an active agent session when the artifact path is known or guessed. Visiting the attacker-controlled website is the required user interaction. This vulnerability is fixed in 0.1.43.

Etkilenen sürümler1 yazılım

Kaynaklar5 kaynak

• CVE.org kaydı
• NVD kaydı
• github.com/…sh-axi/security/advisories/GHSA-fwx2-qmmq-qvx2 Diğer
• github.com/…ommit/f016972251556a83cd4712cf081a475cfcf3646a Diğer
• github.com/…uid/lavish-axi/releases/tag/lavish-axi-v0.1.43 Diğer

Kayıt geçmişi

1. 6 Kas 2026 23:39Yayımlandı

İlgili açıklar

• 6,4 CVE-2026-102610fast-agent: `fast-agent serve` binds HTTP to 0.0.0.0 with no authentication by default; with --shell this is unauthenticated remote command execution
• 8,8 CVE-2026-65960Tetragon: Unauthenticated Tetragon gRPC admin API accessible from hostNetwork pods
• 7,5 CVE-2026-124027ChatWiki before 2.10.0 Unauthenticated Document Disclosure via getLibRawFileOnePage
• 4,6 CVE-2026-123996Hisense VIDAA Smart TV UPnP/DLNA Missing Authentication
• 4,6 CVE-2026-123995Hisense VIDAA Smart TV SSRF via SetAVTransportURI CurrentURI
• 6,3 CVE-2026-123994Hisense VIDAA Smart TV DIAL Service Unauthenticated Access