Skip to content
OpenAdvisories

Weakness (CWE)

CWE-420: Unprotected Alternate Channel

Base Draft

The product protects a primary channel, but it does not use the same level of protection for an alternate channel.

How to prevent it (1 mitigation)

  1. Architecture and Design

    Identify all alternate channels and use the same protection mechanisms that are used for the primary channels.

Source: MITRE CWE-420

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-40217 Public exploit EPSS 17%

    LiteLLM has a sandbox escape in custom-code guardrail

    LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.

    BerriAI litellm litellm PyPI
  • High 7.5
    CVE-2025-67303 Public exploit

    ComfyUI-Manager has an Unprotected Alternate Channel (CWE-420)

    An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data. This was due to the application storing its files in an insufficiently protected location that was accessible via the web…

    comfyui-manager PyPI