Skip to content
OpenAdvisories

Product · coder

agentapi

1 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Feed

  • Medium 6.5
    CVE-2025-59956

    AgentAPI exposed user chat history via a DNS rebinding attack

    AgentAPI is an HTTP API for Claude Code, Goose, Aider, Gemini, Amp, and Codex. Versions 0.3.3 and below are susceptible to a client-side DNS rebinding attack when hosted over plain HTTP on localhost. An attacker can gain access to the /messages endpoint serve…

    coder agentapi github.com/coder/agentapi Go