Skip to content
OpenAdvisories

Weakness (CWE)

CWE-441: Unintended Proxy or Intermediary

Class Draft

The product receives a request, message, or directive from an upstream component, but the product does not sufficiently preserve the original source of the request before forwarding the request to an external actor that is outside of the product's control sphere.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Enforce the use of strong mutual authentication mechanism between the two parties.

  2. Architecture and Design

    Whenever a product is an intermediary or proxy for
    transactions between two other components, the proxy core
    should not drop the identity of the initiator of the
    transaction. The immutability of the identity of the
    initiator must be maintained and should be forwarded all the
    way to the target.

Source: MITRE CWE-441

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-114612 Public exploit

    LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key

    LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From 1.87.0 until 1.100.4, 1.101.3, 1.102.2, 1.103.1, and 1.104.0-rc.2, the proxy reuses one cryptographic context for at-rest secrets and session tokens, allowing an authen…

    BerriAI litellm litellm PyPI
  • Critical 10.0
    CVE-2026-102255 Public exploit

    A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alter…

    SonicWall SMA1000 Network devices
  • Critical 9.3
    CVE-2026-103922 Public exploit

    Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path

    Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates …

    swift com.capacitorjs ionic-team @capacitor Android iOS npm Maven SwiftURL
  • Critical 10.0
    CVE-2026-83548 Exploited Public exploit

    A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alter…

    SonicWall SMA1000 Network devices
    KEV Sep 2, 2026
  • Critical 9.8
    CVE-2026-23751 Public exploit

    Kofax Capture 6.0.0.0 Unauthenticated File Read/Write & SMB Coercion via .NET Remoting

    Kofax Capture, now referred to as Tungsten Capture, version 6.0.0.0 (other versions may be affected) exposes a deprecated .NET Remoting HTTP channel on port 2424 via the Ascent Capture Service that is accessible without authentication and uses a default, publ…

    Tungsten Automation Tungsten Capture (formerly Kofax Capture)
  • Critical 9.9
    CVE-2026-28466 Public exploit

    OpenClaw < 2026.2.14 - Remote Code Execution via Node Invoke Approval Bypass

    OpenClaw versions prior to 2026.2.14 contain a vulnerability in the gateway in which it fails to sanitize internal approval fields in node.invoke parameters, allowing authenticated clients to bypass exec approval gating for system.run commands. Attackers with…

    OpenClaw OpenClaw openclaw npm