1 result · Clear filters · Feed
-
Medium 4.7
RStudio Server / Posit Workbench localhost port-proxy does not enforce per-session port ownership
Authorization bypass through user-controlled key in the localhost port-proxy (/p/<token>/) in Posit Software, PBC RStudio Server and Posit Workbench before 2026.08.0 allows remote authenticated users to reach web applications and other services bound to 127.0…