CWE-807: Reliance on Untrusted Inputs in a Security Decision
The product uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- telenia software tvoxTelenia TVox 26.5.3 Authentication Bypass via set_env.php9.3 Critical
- mongodb, mongodb server, mongodb, inc. mongodb server +2 moreImproper Validation of Client-Supplied Command Parameters Allowing Role-Based Access Control Bypass8.6 High
- red hat build of keycloak 26.6, build of keycloak 26.6.7, data grid 8 +5 more +7 moreKeycloak-services: keycloak-services: required signed-jwt assertion policy can be bypassed with unsigned assertion headers5.4 Medium
- eclipse kura, the eclipse foundation eclipse kura +1 moreEclipse Kura versions prior to 5.6.2 trust the client-supplied X-Forwarded-For HTTP header as the...8.8 High
github.com/0xERR0R/blockyGoBlocky DNSSEC validation bypass and validation-cache scope pollution8.6 High- mcdope pam usbpam_usb: getenv() used in PAM context allows environment variable injection into local-check logic6.3 Medium
- util-linuxutil-linux LIBMOUNT_FORCE_MOUNT2 allows nosuid and noexec bypass7.0 High
- traefik, red hat openshift dev spaces 3.30 +1 moreTraefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypass7.8 High
- openclawOpenClaw < 2026.5.7 - Sender Policy Bypass via Mutable Conversation Identifiers in BlueBubbles2.3 Low
com.appsmith:serverMavenAppsmith: Configuration-dependent origin validation bypass in password reset and email verification link generation8.1 High- vivo pcsuiteThe connection confirmation pop-up of a specific feature in the PcSuite can be bypassed.5.3 Medium
- openclawOpenClaw < 2026.5.6 - Approval Policy Bypass in Skill Workshop Apply Flow6.0 Medium
- litestar-org litestarLitestar: AllowedHostsMiddleware bypasses host validation via client-controlled X-Forwarded-Host header5.9 Medium
- e107inc e107e107: Host Header Injection in e107 password reset enables phishing8.1 High
- sillytavernSillyTavern: Authentication Bypass via SSO Header Injection9.8 Critical
- remote spark (https://www.remotespark.com/) sparkviewRemote Spark SparkView RCE10.0 Critical
- patriksimek vm2, red hat developer hub, self-service automation portal 2 +2 morevm2: Sandbox Breakout Through Promise Species9.8 Critical
- mtrudel banditClient-supplied URI scheme trusted without transport verification in bandit6.3 Medium
- canon inc. i-sensys c1533if ii, i-sensys mf842cdw, i-sensys x c1538 if ii +12 more +14 moreA vulnerability in the browser-based remote management interface may allow an administrator to...6.9 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +10 more +12 moreUEFI Secure Boot Security Feature Bypass Vulnerability6.7 Medium
- nsasoft spotftp, nsauditor spotftp password recover +1 moreSpotFTP Password Recover 2.4.2 Denial of Service via Name Field6.9 Medium
- contemporary controls bascontrol20Contemporary Controls BASC 20T Reliance on Untrusted Inputs in a Security Decision9.3 Critical
- apache tomcat, red hat enterprise linux 10, enterprise linux 10.0 extended update support +21 more +23 moreApache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor7.5 High
- openclawOpenClaw < 2026.3.31 - Access Control Bypass via Proxied Remote Request Misclassification6.3 Medium
- openclawOpenClaw < 2026.3.31 - Environment Variable Bypass in Package Index URL Handling5.8 Medium
- seppmail secure email gatewayGINA Domain Switch5.3 Medium
- openclawOpenClaw < 2026.3.28 - Arbitrary Execution Allowlist via Wrapper Carrier Executables7.0 High
- openclawOpenClaw < 2026.3.28 - Exec Allowlist Bypass via Unregistered /usr/bin/script Wrapper7.0 High
- openclawOpenClaw < 2026.3.28 - Client Identity Spoofing in chat.send Gateway Provenance Guard7.1 High
- openclawOpenClaw < 2026.3.25 - Authorization Bypass via Group Policy Rebinding with Mutable Space displayName2.3 Low
- openclawOpenClaw < 2026.3.22 - Identity Spoofing via rawInput Tool in ACP Permission Resolution6.9 Medium
- openclawOpenClaw < 2026.3.22 - Policy Confusion via Room Name Collision in Nextcloud Talk2.3 Low
- openclawOpenClaw < 2026.3.22 - Webhook Reply Rebinding via Username Resolution in Synology Chat6.0 Medium
- pixarra pixel studioPixel Studio 2.17 Denial of Service via Malformed Input6.9 Medium
- xlinesoft asprunner.netASPRunner.NET 10.1 Denial of Service via Table Name Field6.9 Medium
- pidginPidgin 2.13.0 Denial of Service via Malformed Username6.9 Medium
- go-vikunja vikunjaVikunja has Rate-Limit Bypass for Unauthenticated Users via Spoofed Headers5.3 Medium
- anthropic claude code, anthropics claude-code +1 moreClaude Code has a Workspace Trust Dialog Bypass via Repo-Controlled Settings File7.7 High
- openclawOpenClaw < 2026.3.12 - Weak Authorization via Mutable Group Names in Zalouser Allowlist6.9 Medium
- argoproj argo workflows, argo-workflows, red hat openshift ai (rhoai) +1 more +3 moreWorkflowTemplate Security Bypass via podSpecPatch in Strict/Secure Reference Mode8.9 High
- openclawOpenClaw < 2026.2.21 - Client IP Spoofing via X-Forwarded-For Header Parsing6.3 Medium
- openclawOpenClaw < 2026.2.25 - Authentication Bypass via Control UI client.id Parameter6.0 Medium
- openclawOpenClaw < 2026.2.23 - ACP Permission Auto-Approval Bypass via Untrusted Tool Metadata5.3 Medium
- seerrPlex-configured Seerr instances vulnerable to unauthenticated account registration via Jellyfin authentication endpoint7.3 High
- openclawOpenClaw < 2026.2.14 - Command Hijacking via Unsafe PATH Handling7.7 High
- microsoft office, 365 apps, 365 apps for enterprise +5 more +7 moreMicrosoft Word Security Feature Bypass Vulnerability7.8 High
- cube-js cube, cube cube.js +1 moreCube privilege escalation via a specially crafted request7.7 High
- streetsidesoftware vscode-spell-checkervscode-spell-checker has a workspace-trust bypass Code Execution7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +5 more +7 moreMicrosoft Office Security Feature Bypass Vulnerability7.8 High
- franklioxygen mytubeMyTube has Rate Limiting Bypass via X-Forwarded-For Header Spoofing6.5 Medium
- Show moreLoading…