CWE-668: Exposure of Resource to Wrong Sphere
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- mervinpraison praisonaiPraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable8.8 High
- steeltoeoss steeltoe.security.authentication.cloudfoundrybase, steeltoe.security.authentication.jwtbearer, steeltoe.security.authentication.openidconnect +2 moreSteeltoe's static JWKS cache shared across schemes and never invalidated5.9 Medium
- openclawOpenClaw < 2026.4.26 - Information Disclosure via Sandboxed Session Spawn2.3 Low
- filebrowserFile Browser: Improper Access Control Occurs via Pre-Created Public Share for a Non-existent Path8.4 High
- openfga, openfga helm charts +1 moreOpenFGA: Cache-key delimiter injection in openfga/openfga shared-iterator and v2 iterator caches enables intra-store authorization-decision poisoning5.0 Medium
- apache http serverApache HTTP Server: mod_dav_fs protected directory access9.1 Critical
- dräger zeus ie, zeus rs c500 +1 moreDräger Zeus IE Anesthesia Workstation USB Interface Privilege Escalation7.0 High
github.com/metal3-io/ironic-standalone-operatorGoIronic Standalone Operator's prometheus metrics exporter bound to all interfaces4.3 Medium- patriksimek vm2vm2: NodeVM observability builtins leak host process and HTTP request data6.9 Medium
- sensiolabs symfony, symfony monolog-bridge +1 moreSymfony: Unauthenticated PHP Object Deserialization in MonologBridge server:log Listener8.3 High
- xyproto algernonAlgernon: Auto-refresh SSE event server binds to all interfaces by default on Linux/macOS4.3 Medium
- typo3 extension "faceted search"Information Disclosure in extension "Faceted Search" (ke_search)5.9 Medium
- mozilla firefox, thunderbird +1 moreInformation disclosure, sandbox escape in the Security: Process Sandboxing component8.6 High
- patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 morevm2: Sandbox Breakout Using Async Generator9.8 Critical
- mediawikiaction=raw with Special:Mypage subpage title responds with "Content-Type: text/html" on ctype=text/javascript request0.0 None
- mediawikiCustomized help link for page protection indicator is relative to subpage name, because the link target is missing the "/wiki/" prefix2.0 Low
- openwebui open webui, open-webui +1 moreOpen WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache Poisoning8.7 High
- patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 morevm2: Sandbox Breakout Through Null Proto Exception9.8 Critical
- patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 morevm2 has sandbox breakout via `neutralizeArraySpeciesBatch`9.8 Critical
- mervinpraison praisonaiPraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow execution7.3 High
- patriksimek vm2vm2: sandbox boundary bypass via host Promise resolution preserving host object identity6.5 Medium
- external-secretsExternal Secrets Operator: Namespace Isolation Bypass in CAProvider ConfigMap Resolution for SecretStore5.3 Medium
- nesquena hermes-webuiNesquena Hermes WebUI Environment Variable Credential Leakage via Profile Switch4.8 Medium
- apache airflowApache Airflow: 3.x - Nested Variable Secret Values Bypass Redaction via max_depth=13.7 Low
- apache airflowApache Airflow: Exposing stack trace in case of constraint error7.5 High
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors, epyc™ 7002 series processors +59 more +61 moreIncorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could...7.1 High
- hashgraph guardianHashgraph Guardian 3.5.1 Unsandboxed JavaScript Execution RCE8.7 High
- openclawOpenClaw < 2026.4.8 - Local File Exfiltration via Shared Reply MEDIA Paths5.9 Medium
- apache airflowApache Airflow: Authorization bypass in DagRun wait endpoint (XCom exposure)6.5 Medium
- mervinpraison praisonaiPraisonAI - Arbitrary File Read and Write via Path Traversal in MultiAgentMonitor8.7 High
- openclawOpenClaw 2026.2.19 through 2026.3.30 - Webhook Replay Dedupe Cache Event Suppression via Shared Authentication2.3 Low
- electronElectron named window.open targets not scoped to the opener's browsing context6.0 Medium
- nyariv sandboxjsSandboxJS has a Sandbox Escape via Prop Object Leak in New Handler6.9 Medium
- openclawOpenClaw < 2026.3.31 - Insufficient Environment Variable Sanitization in Host Execution7.1 High
- electron, red hat build of podman desktop, build of podman desktop - tech preview +2 moreElectron: Context Isolation bypass via contextBridge VideoFrame transfer8.4 High
- cisco smart software manager on-premCisco Smart Software Manager On-Prem Arbitrary Command Execution Vulnerability9.8 Critical
- openclawOpenClaw < 2026.3.28 - Environment Variable Disclosure via jq $ENV Filter Bypass7.1 High
- openclawOpenClaw < 2026.3.2 - Filesystem Boundary Bypass in Image Tool6.0 Medium
- apache airflowApache Airflow: Path of session token in cookie does not consider base_url - session hijacking via co-hosted applications7.5 High
- openclawOpenClaw < 2026.3.11 - Workspace Boundary Bypass via Agent RPC Parameters8.7 High
- No product listedExposure of resource to wrong sphere in the UEFI PdaSmm module for some Intel(R) reference...5.6 Medium
- nerves-hub nerves hub web, nerveshub +1 moreImproper authorization in device bulk actions and device update API allows cross-organization device control9.4 Critical
- wwbn avideoWWBN AVideo: Unauthenticated PHP session store exposed to host network via published memcached port8.1 High
- python software foundation cpythonSourcelessFileLoader does not use io.open_code()5.7 Medium
openclawnpmOpenClaw: Hardlink alias checks could bypass workspace-only file boundaries in specific configurations7.6 High- darkreaderDark Reader gives users the ability to request style sheets from local web servers3.4 Low
- bigbluebuttonBigBlueButton: Exposed ClamAV port enables Denial of Service7.2 High
- cisco skill scanner, cisco-ai-defense skill-scanner +1 moreSkill Scanner Unsecured Network Binding Vulnerability6.5 Medium
- microsoft azure iot explorerAzure IoT Explorer Information Disclosure Vulnerability6.5 Medium
- blakeblackshear frigateFrigate Affected by Authenticated Remote Command Execution (RCE) and Container Escape9.1 Critical
- Show moreLoading…