https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 09 Nov 2026 23:21:33 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-121880 <p>Authorization bypass through user-controlled key in the localhost port-proxy (/p/&lt;token&gt;/) in Posit Software, PBC RStudio Server and Posit Workbench before 2026.08.0 allows remote authenticated users to reach web applications and other services bound to 127.0.0.1 under a different user&#39;s session, and to view their live rendered content and data, via a proxy URL constructed from the attacker&#39;s own port token for an arbitrary port number. The port token is a documented obfuscation measure and not an authorization boundary, and the proxy does not verify that the requested port belongs to the requesting user&#39;s session.</p> <p>NOTE: exploitation requires an authenticated account on the same multi-user server and a target service listening on localhost at the time of access. Impact may be greater on hosts that co-locate additional privileged localhost services, and the bypass is not prevented by allow-shell=false; no setting restricts the port-proxy without disabling all application proxying.</p> <p>Authorization bypass through user-controlled key in the localhost port-proxy (/p/&lt;token&gt;/) in Posit Software, PBC RStudio Server and Posit Workbench before 2026.08.0 allows remote authenticated users to reach web applications and other services bound to 127.0.0.1 under a different user&#39;s session, and to view their live rendered content and data, via a proxy URL constructed from the attacker&#39;s own port token for an arbitrary port number. The port token is a documented obfuscation measure and not an authorization boundary, and the proxy does not verify that the requested port belongs to the requesting user&#39;s session.</p> <p>NOTE: exploitation requires an authenticated account on the same multi-user server and a target service listening on localhost at the time of access. Impact may be greater on hosts that co-locate additional privileged localhost services, and the bypass is not prevented by allow-shell=false; no setting restricts the port-proxy without disabling all application proxying.</p> https://db.gcve.eu/vuln/fkie_cve-2026-121880 https://db.gcve.eu/vuln/ghsa-45mx-vf84-77ww <p>Authorization bypass through user-controlled key in the localhost port-proxy (/p/&lt;token&gt;/) in Posit Software, PBC RStudio Server and Posit Workbench before 2026.08.0 allows remote authenticated users to reach web applications and other services bound to 127.0.0.1 under a different user&#39;s session, and to view their live rendered content and data, via a proxy URL constructed from the attacker&#39;s own port token for an arbitrary port number. The port token is a documented obfuscation measure and not an authorization boundary, and the proxy does not verify that the requested port belongs to the requesting user&#39;s session.</p> <p>NOTE: exploitation requires an authenticated account on the same multi-user server and a target service listening on localhost at the time of access. Impact may be greater on hosts that co-locate additional privileged localhost services, and the bypass is not prevented by allow-shell=false; no setting restricts the port-proxy without disabling all application proxying.</p> <p>Authorization bypass through user-controlled key in the localhost port-proxy (/p/&lt;token&gt;/) in Posit Software, PBC RStudio Server and Posit Workbench before 2026.08.0 allows remote authenticated users to reach web applications and other services bound to 127.0.0.1 under a different user&#39;s session, and to view their live rendered content and data, via a proxy URL constructed from the attacker&#39;s own port token for an arbitrary port number. The port token is a documented obfuscation measure and not an authorization boundary, and the proxy does not verify that the requested port belongs to the requesting user&#39;s session.</p> <p>NOTE: exploitation requires an authenticated account on the same multi-user server and a target service listening on localhost at the time of access. Impact may be greater on hosts that co-locate additional privileged localhost services, and the bypass is not prevented by allow-shell=false; no setting restricts the port-proxy without disabling all application proxying.</p> https://db.gcve.eu/vuln/ghsa-45mx-vf84-77ww