CVE-2026-62314 (GCVE-0-2026-62314)

Vulnerability from cvelistv5 – Published: 2026-07-15 21:18 – Updated: 2026-08-12 17:50

Title

Anubis: Policy bypass via client controlled X-Original-URI header

Summary

Anubis is a Web AI Firewall Utility that challenges users' connections in order to protect upstream resources from scraper bots. From 1.22.0 until 1.26.0-pre1, lib/policy/checker.go PathChecker.Check() trusted the client-controlled X-Original-URI header before matching r.URL.Path, allowing an HTTP client to match default data/common/keep-internet-working.yaml ALLOW rules such as ^/\.well-known/.*$ and bypass the Anubis challenge. This issue is fixed in version 1.26.0-pre1.

Severity

5.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-12 17:50 UTC

CWE

CWE-284 - Improper Access Control

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7763 records in the last 180 days details

References

4 references

URL	Tags
https://github.com/TecharoHQ/anubis/security/advi…	x_refsource_CONFIRM
https://github.com/TecharoHQ/anubis/pull/1630	x_refsource_MISC
https://github.com/TecharoHQ/anubis/commit/276b53…	x_refsource_MISC
https://github.com/TecharoHQ/anubis/releases/tag/…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version	CPE status
TecharoHQ	anubis	Affected: >= 1.22.0, < 1.26.0-pre1	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-62314",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-12T17:50:19.423991Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-12T17:50:22.279Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/TecharoHQ/anubis/security/advisories/GHSA-6wcg-mqvh-fcvg"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "anubis",
          "vendor": "TecharoHQ",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 1.22.0, \u003c 1.26.0-pre1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Anubis is a Web AI Firewall Utility that challenges users\u0027 connections in order to protect upstream resources from scraper bots. From 1.22.0 until 1.26.0-pre1, lib/policy/checker.go PathChecker.Check() trusted the client-controlled X-Original-URI header before matching r.URL.Path, allowing an HTTP client to match default data/common/keep-internet-working.yaml ALLOW rules such as ^/\\.well-known/.*$ and bypass the Anubis challenge. This issue is fixed in version 1.26.0-pre1."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "CWE-284: Improper Access Control",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-15T21:18:00.355Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/TecharoHQ/anubis/security/advisories/GHSA-6wcg-mqvh-fcvg",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/TecharoHQ/anubis/security/advisories/GHSA-6wcg-mqvh-fcvg"
        },
        {
          "name": "https://github.com/TecharoHQ/anubis/pull/1630",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/TecharoHQ/anubis/pull/1630"
        },
        {
          "name": "https://github.com/TecharoHQ/anubis/commit/276b537776b281b1c4e01421435bc03ade3d8fc4",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/TecharoHQ/anubis/commit/276b537776b281b1c4e01421435bc03ade3d8fc4"
        },
        {
          "name": "https://github.com/TecharoHQ/anubis/releases/tag/v1.26.0-pre1",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/TecharoHQ/anubis/releases/tag/v1.26.0-pre1"
        }
      ],
      "source": {
        "advisory": "GHSA-6wcg-mqvh-fcvg",
        "discovery": "UNKNOWN"
      },
      "title": "Anubis: Policy bypass via client controlled X-Original-URI header"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-62314",
    "datePublished": "2026-07-15T21:18:00.355Z",
    "dateReserved": "2026-07-13T19:27:58.314Z",
    "dateUpdated": "2026-08-12T17:50:22.279Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-62314",
      "date": "2026-11-11",
      "epss": "0.0034",
      "percentile": "0.27759"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "anubis",
                "vendor": "TecharoHQ",
                "versions": [
                  {
                    "status": "affected",
                    "version": "\u003e= 1.22.0, \u003c 1.26.0-pre1"
                  }
                ]
              }
            ],
            "source": "security-advisories@github.com"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Anubis is a Web AI Firewall Utility that challenges users\u0027 connections in order to protect upstream resources from scraper bots. From 1.22.0 until 1.26.0-pre1, lib/policy/checker.go PathChecker.Check() trusted the client-controlled X-Original-URI header before matching r.URL.Path, allowing an HTTP client to match default data/common/keep-internet-working.yaml ALLOW rules such as ^/\\.well-known/.*$ and bypass the Anubis challenge. This issue is fixed in version 1.26.0-pre1."
          },
          {
            "lang": "es",
            "value": "Anubis es una utilidad de cortafuegos web con IA que desaf\u00eda las conexiones de los usuarios para proteger los recursos ascendentes de los bots raspadores. Desde la versi\u00f3n 1.22.0 hasta la 1.26.0-pre1, lib/policy/checker.go PathChecker.Check() confiaba en el encabezado X-Original-URI controlado por el cliente antes de hacer coincidir r.URL.Path, lo que permit\u00eda a un cliente HTTP hacer coincidir reglas ALLOW predeterminadas de data/common/keep-internet-working.yaml como ^/\\.well-known/.*$ y eludir el desaf\u00edo de Anubis. Este problema est\u00e1 solucionado en la versi\u00f3n 1.26.0-pre1."
          }
        ],
        "id": "CVE-2026-62314",
        "lastModified": "2026-10-24T21:10:00.130",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 5.8,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 1.4,
              "source": "security-advisories@github.com",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-62314",
                "options": [
                  {
                    "exploitation": "poc"
                  },
                  {
                    "automatable": "yes"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-12T17:50:19.423991Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-07-15T22:17:38.050",
        "references": [
          {
            "source": "security-advisories@github.com",
            "url": "https://github.com/TecharoHQ/anubis/commit/276b537776b281b1c4e01421435bc03ade3d8fc4"
          },
          {
            "source": "security-advisories@github.com",
            "url": "https://github.com/TecharoHQ/anubis/pull/1630"
          },
          {
            "source": "security-advisories@github.com",
            "url": "https://github.com/TecharoHQ/anubis/releases/tag/v1.26.0-pre1"
          },
          {
            "source": "security-advisories@github.com",
            "url": "https://github.com/TecharoHQ/anubis/security/advisories/GHSA-6wcg-mqvh-fcvg"
          },
          {
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "url": "https://github.com/TecharoHQ/anubis/security/advisories/GHSA-6wcg-mqvh-fcvg"
          }
        ],
        "sourceIdentifier": "security-advisories@github.com",
        "vulnStatus": "Deferred",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-284"
              }
            ],
            "source": "security-advisories@github.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-62314",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-08-12T17:50:19.423991Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-07-16T12:47:23.013Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "exploit"
                ],
                "url": "https://github.com/TecharoHQ/anubis/security/advisories/GHSA-6wcg-mqvh-fcvg"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "anubis",
              "vendor": "TecharoHQ",
              "versions": [
                {
                  "status": "affected",
                  "version": "\u003e= 1.22.0, \u003c 1.26.0-pre1"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Anubis is a Web AI Firewall Utility that challenges users\u0027 connections in order to protect upstream resources from scraper bots. From 1.22.0 until 1.26.0-pre1, lib/policy/checker.go PathChecker.Check() trusted the client-controlled X-Original-URI header before matching r.URL.Path, allowing an HTTP client to match default data/common/keep-internet-working.yaml ALLOW rules such as ^/\\.well-known/.*$ and bypass the Anubis challenge. This issue is fixed in version 1.26.0-pre1."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 5.8,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-284",
                  "description": "CWE-284: Improper Access Control",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-07-15T21:18:00.355Z",
            "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
            "shortName": "GitHub_M"
          },
          "references": [
            {
              "name": "https://github.com/TecharoHQ/anubis/security/advisories/GHSA-6wcg-mqvh-fcvg",
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://github.com/TecharoHQ/anubis/security/advisories/GHSA-6wcg-mqvh-fcvg"
            },
            {
              "name": "https://github.com/TecharoHQ/anubis/pull/1630",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/TecharoHQ/anubis/pull/1630"
            },
            {
              "name": "https://github.com/TecharoHQ/anubis/commit/276b537776b281b1c4e01421435bc03ade3d8fc4",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/TecharoHQ/anubis/commit/276b537776b281b1c4e01421435bc03ade3d8fc4"
            },
            {
              "name": "https://github.com/TecharoHQ/anubis/releases/tag/v1.26.0-pre1",
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://github.com/TecharoHQ/anubis/releases/tag/v1.26.0-pre1"
            }
          ],
          "source": {
            "advisory": "GHSA-6wcg-mqvh-fcvg",
            "discovery": "UNKNOWN"
          },
          "title": "Anubis: Policy bypass via client controlled X-Original-URI header"
        }
      },
      "cveMetadata": {
        "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "assignerShortName": "GitHub_M",
        "cveId": "CVE-2026-62314",
        "datePublished": "2026-07-15T21:18:00.355Z",
        "dateReserved": "2026-07-13T19:27:58.314Z",
        "dateUpdated": "2026-08-12T17:50:22.279Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2026-62314

Vulnerability from fkie_nvd - Published: 2026-07-15 22:17 - Updated: 2026-10-24 21:10

Severity

5.8 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Summary

References

	URL	Tags
	security-advisories@github.com	https://github.com/TecharoHQ/anubis/commit/276b537776b281b1c4e01421435bc03ade3d8fc4
	security-advisories@github.com	https://github.com/TecharoHQ/anubis/pull/1630
	security-advisories@github.com	https://github.com/TecharoHQ/anubis/releases/tag/v1.26.0-pre1
	security-advisories@github.com	https://github.com/TecharoHQ/anubis/security/advisories/GHSA-6wcg-mqvh-fcvg
	134c704f-9b21-4f2e-91b3-4a467353bcc0	https://github.com/TecharoHQ/anubis/security/advisories/GHSA-6wcg-mqvh-fcvg

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "anubis",
          "vendor": "TecharoHQ",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 1.22.0, \u003c 1.26.0-pre1"
            }
          ]
        }
      ],
      "source": "security-advisories@github.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Anubis is a Web AI Firewall Utility that challenges users\u0027 connections in order to protect upstream resources from scraper bots. From 1.22.0 until 1.26.0-pre1, lib/policy/checker.go PathChecker.Check() trusted the client-controlled X-Original-URI header before matching r.URL.Path, allowing an HTTP client to match default data/common/keep-internet-working.yaml ALLOW rules such as ^/\\.well-known/.*$ and bypass the Anubis challenge. This issue is fixed in version 1.26.0-pre1."
    },
    {
      "lang": "es",
      "value": "Anubis es una utilidad de cortafuegos web con IA que desaf\u00eda las conexiones de los usuarios para proteger los recursos ascendentes de los bots raspadores. Desde la versi\u00f3n 1.22.0 hasta la 1.26.0-pre1, lib/policy/checker.go PathChecker.Check() confiaba en el encabezado X-Original-URI controlado por el cliente antes de hacer coincidir r.URL.Path, lo que permit\u00eda a un cliente HTTP hacer coincidir reglas ALLOW predeterminadas de data/common/keep-internet-working.yaml como ^/\\.well-known/.*$ y eludir el desaf\u00edo de Anubis. Este problema est\u00e1 solucionado en la versi\u00f3n 1.26.0-pre1."
    }
  ],
  "id": "CVE-2026-62314",
  "lastModified": "2026-10-24T21:10:00.130",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 5.8,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 1.4,
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-62314",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-08-12T17:50:19.423991Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-07-15T22:17:38.050",
  "references": [
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/TecharoHQ/anubis/commit/276b537776b281b1c4e01421435bc03ade3d8fc4"
    },
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/TecharoHQ/anubis/pull/1630"
    },
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/TecharoHQ/anubis/releases/tag/v1.26.0-pre1"
    },
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/TecharoHQ/anubis/security/advisories/GHSA-6wcg-mqvh-fcvg"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "url": "https://github.com/TecharoHQ/anubis/security/advisories/GHSA-6wcg-mqvh-fcvg"
    }
  ],
  "sourceIdentifier": "security-advisories@github.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ],
      "source": "security-advisories@github.com",
      "type": "Secondary"
    }
  ]
}

GHSA-6WCG-MQVH-FCVG

Vulnerability from github – Published: 2026-10-02 18:22 – Updated: 2026-10-02 18:22

Summary

Anubis: Policy bypass via client controlled X-Original-URI header

Details

Any HTTP client can bypass Anubis bot protection on the default configuration by adding a single request header. No challenge needs to be solved. Affected versions: v1.22.0 through v1.25.0 (introduced in commit d1d631a, PR #1015)

The root cause is in lib/policy/checker.go, PathChecker.Check():

func (pc *PathChecker) Check(r *http.Request) (bool, error) {
    originalUrl := r.Header.Get("X-Original-URI")
    if originalUrl != "" {
        if pc.regexp.MatchString(originalUrl) {
            return true, nil
        }
    }
    if pc.regexp.MatchString(r.URL.Path) {
        return true, nil
    }
    return false, nil
}

The header value comes directly from the client request. The middleware chain never strips it. In reverse proxy mode an attacker fully controls it. The default policy imports data/common/keep-internet-working.yaml, which contains path-only ALLOW rules with no other conditions:

- name: well-known
  path_regex: ^/\.well-known/.*$
  action: ALLOW

When X-Original-URI matches one of those regexes, the rule fires as ALLOW and the request is forwarded upstream without any challenge or JWT check.

Proof of concept

Normal request, gets challenged:

curl -s https://anubis.techaro.lol/ | grep -o "<title>.*</title>"

Bypass, gets upstream content:

curl -s -H "X-Original-URI: /.well-known/x" https://anubis.techaro.lol/ | grep -o "<title>.*</title>"

The first command returns the Anubis challenge page title. The second returns the real site title directly, with no cookie set and no challenge issued. Verified live against anubis.techaro.lol.

Suggested fix

The fix should probably be to strip the header from incoming client requests in the middleware chain before policy evaluation. In auth_request mode the header is set by the proxy after Anubis processes the middleware, so stripping it at ingress does not break that deployment mode.

Severity

5.8 (Medium)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "Go",
        "name": "github.com/TecharoHQ/anubis"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "1.22.0"
            },
            {
              "fixed": "1.26.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2026-62314"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-284"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-10-02T18:22:08Z",
    "nvd_published_at": "2026-07-15T22:17:38Z",
    "severity": "MODERATE"
  },
  "details": "Any HTTP client can bypass Anubis bot protection on the default configuration by adding a single request header. No challenge needs to be solved.\nAffected versions: v1.22.0 through v1.25.0 (introduced in commit d1d631a, PR #1015)\n\nThe root cause is in `lib/policy/checker.go`, `PathChecker.Check()`:\n```go\nfunc (pc *PathChecker) Check(r *http.Request) (bool, error) {\n    originalUrl := r.Header.Get(\"X-Original-URI\")\n    if originalUrl != \"\" {\n        if pc.regexp.MatchString(originalUrl) {\n            return true, nil\n        }\n    }\n    if pc.regexp.MatchString(r.URL.Path) {\n        return true, nil\n    }\n    return false, nil\n}\n```\n\nThe header value comes directly from the client request. The middleware chain never strips it. In reverse proxy mode an attacker fully controls it.\nThe default policy imports `data/common/keep-internet-working.yaml`, which contains path-only ALLOW rules with no other conditions:\n\n```yaml\n- name: well-known\n  path_regex: ^/\\.well-known/.*$\n  action: ALLOW\n```\n\nWhen `X-Original-URI` matches one of those regexes, the rule fires as ALLOW and the request is forwarded upstream without any challenge or JWT check.\n\n\n# Proof of concept\n\nNormal request, gets challenged:\n```\ncurl -s https://anubis.techaro.lol/ | grep -o \"\u003ctitle\u003e.*\u003c/title\u003e\"\n```\n\nBypass, gets upstream content:\n```\ncurl -s -H \"X-Original-URI: /.well-known/x\" https://anubis.techaro.lol/ | grep -o \"\u003ctitle\u003e.*\u003c/title\u003e\"\n```\n\nThe first command returns the Anubis challenge page title. The second returns the real site title directly, with no cookie set and no challenge issued. Verified live against anubis.techaro.lol.\n\n# Suggested fix\nThe fix should probably be to strip the header from incoming client requests in the middleware chain before policy evaluation. In `auth_request` mode the header is set by the proxy after Anubis processes the middleware, so stripping it at ingress does not break that deployment mode.",
  "id": "GHSA-6wcg-mqvh-fcvg",
  "modified": "2026-10-02T18:22:08Z",
  "published": "2026-10-02T18:22:08Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/TecharoHQ/anubis/security/advisories/GHSA-6wcg-mqvh-fcvg"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62314"
    },
    {
      "type": "WEB",
      "url": "https://github.com/TecharoHQ/anubis/pull/1630"
    },
    {
      "type": "WEB",
      "url": "https://github.com/TecharoHQ/anubis/commit/276b537776b281b1c4e01421435bc03ade3d8fc4"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/TecharoHQ/anubis"
    },
    {
      "type": "WEB",
      "url": "https://github.com/TecharoHQ/anubis/releases/tag/v1.26.0-pre1"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Anubis: Policy bypass via client controlled X-Original-URI header"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-62314 (GCVE-0-2026-62314)

FKIE_CVE-2026-62314

GHSA-6WCG-MQVH-FCVG

Proof of concept

Suggested fix

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour