Skip to content
OpenAdvisories

Weakness (CWE)

CWE-441: Unintended Proxy or Intermediary

Class Draft

The product receives a request, message, or directive from an upstream component, but the product does not sufficiently preserve the original source of the request before forwarding the request to an external actor that is outside of the product's control sphere.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Enforce the use of strong mutual authentication mechanism between the two parties.

  2. Architecture and Design

    Whenever a product is an intermediary or proxy for
    transactions between two other components, the proxy core
    should not drop the identity of the initiator of the
    transaction. The immutability of the identity of the
    initiator must be maintained and should be forwarded all the
    way to the target.

Source: MITRE CWE-441

All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-114612 Public exploit

    LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key

    LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From 1.87.0 until 1.100.4, 1.101.3, 1.102.2, 1.103.1, and 1.104.0-rc.2, the proxy reuses one cryptographic context for at-rest secrets and session tokens, allowing an authen…

    BerriAI litellm litellm PyPI
  • Critical 10.0
    CVE-2026-102255 Public exploit

    A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alter…

    SonicWall SMA1000 Network devices
  • Critical 9.3
    CVE-2026-103922 Public exploit

    Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path

    Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates …

    swift com.capacitorjs ionic-team @capacitor Android iOS npm Maven SwiftURL
  • Medium 5.5
    CVE-2026-84616 Public exploit

    A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iO…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Critical 10.0
    CVE-2026-83548 Exploited Public exploit

    A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alter…

    SonicWall SMA1000 Network devices
    KEV Sep 2, 2026
  • Medium 6.5
    CVE-2026-49086 Public exploit

    Apache Camel Dapr: Pub/Sub consumer copied the inbound CloudEvent's pub/sub-name and topic into producer-direction routing headers, allowing an actor who can publish to the subscribed topic to influence internal behaviour

    Improper Input Validation, Unintended Proxy or Intermediary ('Confused Deputy') vulnerability in Apache Camel DAPR component. The camel-dapr Dapr Pub/Sub consumer (DaprPubSubConsumer) copied two fields from each inbound CloudEvent - its Pub/Sub component name…

    Apache Software Foundation Apache Camel Dapr org.apache.camel:camel-dapr Maven
  • High 7.5
    CVE-2026-46592 Public exploit

    Apache Camel: Camel-CXF: The SOAP operation-selection headers used non-Camel-prefixed names (operationName, operationNamespace) that bypass the HTTP header filter, allowing an HTTP client to redirect the invoked SOAP operation

    Improper Input Validation, Unintended Proxy or Intermediary ('Confused Deputy') vulnerability in Apache Camel CXF SOAP component. The camel-cxf producer selects which SOAP operation to invoke on the backend service from the operationName (and operationNamespa…

    Apache Software Foundation Apache Camel org.apache.camel:camel-cxf-rest org.apache.camel:camel-cxf-soap Maven
  • Critical 9.8
    CVE-2026-23751 Public exploit

    Kofax Capture 6.0.0.0 Unauthenticated File Read/Write & SMB Coercion via .NET Remoting

    Kofax Capture, now referred to as Tungsten Capture, version 6.0.0.0 (other versions may be affected) exposes a deprecated .NET Remoting HTTP channel on port 2424 via the Ascent Capture Service that is accessible without authentication and uses a default, publ…

    Tungsten Automation Tungsten Capture (formerly Kofax Capture)
  • Medium 5.3
    CVE-2026-30225 Public exploit

    OliveTin: RestartAction always runs actions as guest

    OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, an authentication context confusion vulnerability in RestartAction allows a low‑privileged authenticated user to execute actions they are not permitted to run…

    OliveTin OliveTin github.com/OliveTin/OliveTin Go
  • Critical 9.9
    CVE-2026-28466 Public exploit

    OpenClaw < 2026.2.14 - Remote Code Execution via Node Invoke Approval Bypass

    OpenClaw versions prior to 2026.2.14 contain a vulnerability in the gateway in which it fails to sanitize internal approval fields in node.invoke parameters, allowing authenticated clients to bypass exec approval gating for system.run commands. Attackers with…

    OpenClaw OpenClaw openclaw npm
  • High 8.4
    CVE-2026-0013 Public exploit

    In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confus…

    Google Android Android
  • High 7.8
    CVE-2025-32324 Public exploit

    In onCommand of ActivityManagerShellCommand.java, there is a possible arbitrary activity launch due to a confused deput…

    Google Android Android
  • High 7.3
    CVE-2025-22441 Public exploit

    In getContextForResourcesEnsuringCorrectCachedApkPaths of RemoteViews.java, there is a possible way to load arbitrary j…

    Google Android Android
  • Unscored —
    CVE-2019-3924 Public exploit EPSS 16%

    MikroTik RouterOS before 6.43.12 (stable) and 6.42.12 (long-term) is vulnerable to an intermediary vulnerability. The s…

    Tenable MikroTik RouterOS