Skip to content
OpenAdvisories

Vendor

markmhendrickson

1 known vulnerabilities.

Products

neotoma 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2026-45577

    Neotoma: Unauthenticated Inspector/API access via reverse-proxy loopback auth bypass

    Neotoma provides versioned records that persist across agent runs. From 0.6.0 to before 0.11.1, Neotoma can treat public reverse-proxied requests as local when the app receives them over a loopback socket and no Bearer token is present. In affected deployment…

    markmhendrickson neotoma neotoma npm