CWE-441

Unintended Proxy or Intermediary ('Confused Deputy')

Parent: CWE-610 - Externally Controlled Reference to a Resource in Another Sphere

The product receives a request, message, or directive from an upstream component, but the product does not sufficiently preserve the original source of the request before forwarding the request to an external actor that is outside of the product's control sphere. This causes the product to appear to be the source of the request, leading it to act as a proxy or other intermediary between the upstream component and the external actor.

109 vulnerabilities with CWE-441
CVE-2026-44992 MEDIUM
OpenClaw 2026.4.5 < 2026.4.20 - MiniMax API Host Override via Workspace dotenv
CVSS 5.0
CVE-2026-42313 HIGH
pyload-ng: non-admin SETTINGS users can redirect all outbound traffic through an attacker-controlled proxy
CVSS 8.3
CVE-2026-45182 LOW
GrapheneOS < 2026050400 - VPN IP Address Leak via QuicConnectionClosePayload Optimization
CVSS 2.2
CVE-2026-7381 CRITICAL
Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting
CVSS 9.1
CVE-2026-41365 MEDIUM
OpenClaw < 2026.3.31 - Sender Allowlist Bypass via Graph API Thread History
CVSS 5.4
CVE-2026-6993 MEDIUM
go-kratos http.DefaultServeMux Fallback server.go NewServer confused deputy
CVSS 5.3
CVE-2026-42043 HIGH
Axios <1.15.1, <0.31.1 - Auth Bypass
CVSS 7.2
CVE-2026-23751 CRITICAL
Kofax Capture 6.0.0.0 Unauthenticated File Read/Write & SMB Coercion via .NET Remoting
CVSS 9.8
CVE-2026-39906 CRITICAL
Unisys WebPerfect Image Suite 3.0 NTLMv2 Hash Leakage via .NET Remoting
CVSS 10.0
CVE-2026-39961 MEDIUM
Aiven Operator has cross-namespace secret exfiltration via ClickhouseUser connInfoSecretSource
CVSS 6.8
CVE-2026-27124 MEDIUM
FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities
CVSS 6.1
CVE-2026-33768 MEDIUM
Astro: Unauthenticated Path Override via `x-astro-path` / `x_astro_path`
CVSS 6.5
CVE-2026-0107 HIGH
gmc_ddr_handle_mba_mr_req - Privilege Escalation
CVSS 8.4
CVE-2026-30225 MEDIUM
OliveTin <3000.11.1 - Privilege Escalation
CVSS 5.3
CVE-2026-0021 HIGH
AppInfoBase.java - Privilege Escalation
CVSS 8.4
CVE-2026-0013 HIGH
Android - Local Privilege Escalation via DocumentsUI PickActivity Confused Deputy
CVSS 8.4
CVE-2026-0008 HIGH
Android - Privilege Escalation via Confused Deputy
CVSS 8.4
CVE-2026-27624 HIGH
coturn < 4.9.0 - Improper Access Control via IPv4-Mapped IPv6 Bypass
CVSS 7.2
CVE-2026-24471 CRITICAL
Continuwuity and Conduit Matrix Homeservers - Arbitrary Event Signing
CVE-2026-24470 HIGH
Skipper <0.24.0 - Privilege Escalation
CVSS 8.1
CVE-2025-48570 HIGH
Android 14 PipTaskOrganizer - Background Activity Launch Privilege Escalation
CVSS 7.8
CVE-2025-62718 CRITICAL
Axios <1.15.0 and <0.31.0 NO_PROXY - Server-Side Request Forgery
CVSS 9.9
CVE-2025-48646 HIGH
ActivityStarter.java - Privilege Escalation
CVSS 7.8
CVE-2025-48579 HIGH
MediaProvider.java - Privilege Escalation
CVSS 8.4
CVE-2025-64125 CRITICAL
Nuvation Energy nCloud VPN Service - Info Disclosure
Details
Vulnerabilities 109