Skip to content
OpenAdvisories

Vendor

tidewave-ai

1 known vulnerabilities.

Products

tidewave 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.3
    CVE-2026-109823

    Host filesystem path disclosure via DNS rebinding

    An attacker can read the name of filesystem paths of your application present via Tidewave configuration via /tidewave/connect or via the rendered toolbar. Neither response checks the Host header. A web page that rebinds its own domain to the loopback address…

    tidewave-ai tidewave tidewave Hex