Weakness (CWE)
CWE-441: Unintended Proxy or Intermediary
The product receives a request, message, or directive from an upstream component, but the product does not sufficiently preserve the original source of the request before forwarding the request to an external actor that is outside of the product's control sphere.
How to prevent it (2 mitigations)
-
Architecture and Design
Enforce the use of strong mutual authentication mechanism between the two parties.
-
Architecture and Design
Whenever a product is an intermediary or proxy for
transactions between two other components, the proxy core
should not drop the identity of the initiator of the
transaction. The immutability of the identity of the
initiator must be maintained and should be forwarded all the
way to the target.
Source: MITRE CWE-441
244 results · Feed
-
Critical 9.9
Azure Arc Elevation of Privilege Vulnerability
Unintended proxy or intermediary in Azure Arc allows an authorized attacker to elevate privileges over a network.
-
Medium 5.8
Metacat acts as unintended proxy to backend Apache SOLR engine
Metacat is data repository software that helps researchers preserve, share, and discover data. Prior to 3.4.2, MetacatSolrIndex.query forwards the client-controlled qt parameter through Apache SolrJ from search endpoints such as /d1/mn/v2/query/solr/ to its p…
-
Low 2.7
Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic
Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and 1.7.3, managementServer.CreateSchematic in internal/backend/grpc/schematics.go passes the caller-controlled TalosVersion field to imageFactoryClient.OverlaysVersions wi…
-
Medium 6.9
Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter
Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes the unauthenticated /_og/d/** route when the documented defaults security.strict = false and security.secret = "" are used, and base64url-decodes the f…
-
High 7.5
CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP
CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over-gRPC listeners in plugin/pkg/doh/doh.go, core/dnsserver/server_quic.go, and core/dnsserver/server_grpc.go call dns.Msg.Unpack without the …
-
Medium 4.8
Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging…
-
Medium 6.7
In platform_msg_handler_init of default_msg_handlers.c, there is a possible confused deputy due to a confused deputy. T…
-
Medium 6.7
In ap_pmic_poll_msg_handler of ap_pmic_ipc.c, there is a possible permission bypass due to a confused deputy. This coul…
-
Medium 6.7
In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This c…
-
Medium 6.7
In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation …
-
High 8.4
In multiple files, there is a possible out-of-bounds read due to type confusion. This could lead to local escalation of…
-
High 8.4
In multiple files, there is a possible way to obtain signatures due to type confusion. This could lead to local escalat…
-
High 7.8
In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privil…
-
Medium 6.7
In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privileg…
-
Medium 6.7
In gmc_mb_msg_handler of gmc_mba.c, there is a possible memory corruption due to a confused deputy. This could lead to …
-
Medium 4.4
In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information discl…
-
High 8.0
Strimzi: Cross-namespace privilege escalation via `Kafka.spec.entityOperator`
Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In Strimzi 1.0.0 and earlier, an attacker who can create a Kafka custom resource can set Kafka.spec.entityOperator watchedNamespace to a tar…
-
Medium 6.3
Hawtio-operator: hawtio-operator: routes/custom-host confused-deputy via spec.routehostname
A flaw was found in hawtio-operator. The operator holds routes/custom-host:create permission cluster-wide and writes the tenant-supplied spec.routeHostName value from the Hawtio custom resource directly into the Route spec without validation or authorization …
-
Medium 5.5CVE-2026-84616 Public exploit
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iO…
-
High 8.6
Anyquery: Server-Side Request Forgery (SSRF) via Unrestricted SQLite Virtual Table Modules in Server Mode
Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server exposes URL-capable SQLite virtual table modules such as json_reader and log_reader through its unauthenticated MySQL-compatible server port without restricting outbound d…
-
Medium 4.2
Confused deputy in Fullscreen in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the…
-
High 8.3
Confused deputy in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised t…
-
Low 3.1
Confused deputy in Prerender in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the …
-
Medium 5.3
Confused deputy in BackgroundFetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromise…
-
High 7.8
In onAttach of BiometricsSettingsBase.java, there is a possible authentication bypass due to a confused deputy. This co…
-
Low 3.3
In screenArgsForPermissionCheckIfAny of multiple locations there is a possible risk of unauthorized access due to a con…
-
High 7.8
In onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible unauthorized URI permission grant due to …
-
High 7.8
In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission bypass due to a confuse…
-
High 7.8
In setupLayout of PickActivity.java, there is a possible bypass of the "Install unknown apps" security restriction due …
-
High 7.8
In multiple locations, there is a possible read/write access to files without the proper permissions due to a confused …
-
High 7.8
In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy. This could …
-
High 7.8
In onCreate of SlicePermissionActivity.java, there is a possible permission bypass due to a confused deputy. This could…
-
High 7.8
In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused de…
-
High 7.8
In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible read/write access to private fi…
-
High 7.8
In onCreate of PaymentDefaultDialog.java, there is a possible way to change default payment app due to a confused deput…
-
Medium 5.5
Microsoft Windows Speech Tampering Vulnerability
Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally.
-
High 8.2
Workload identity attestation generated before login host validation in Snowflake drivers
In affected Snowflake drivers, WORKLOAD_IDENTITY authentication requests a cloud workload-identity token and attaches it to the login request without verifying that the configured host is a Snowflake endpoint. An attacker who can modify the connection configu…
-
Medium 5.0
Sim before 0.8.14 Confused Deputy in Tool URL Routing Mints an Internal Token for a User-Supplied /api/ Path
Sim before 0.8.14 classifies tool requests as internal based on URL prefix matching without scheme normalization, skipping SSRF validation and minting internal authentication tokens. Authenticated workflow authors can bypass external URL validation by supplyi…
-
Medium 5.3
Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker w…
-
Critical 10.0
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alter…
KEV Sep 2, 2026