CVE-2026-27579

This repository contains a functional exploit PoC for CVE-2026-27579, which leverages a CORS misconfiguration in Appwrite to steal authenticated user data via credentialed cross-origin requests. The exploit sets up a malicious server that tricks victims into leaking their account information when visiting an attacker-controlled page.

The repository contains a functional proof-of-concept exploit for CVE-2026-27579, demonstrating a CORS misconfiguration in the Appwrite backend of the realtime-collaboration-platform. The exploit leverages permissive CORS settings to exfiltrate authenticated user data via a simple fetch request.

This repository contains a functional exploit for CVE-2026-27579, which leverages a CORS misconfiguration in Appwrite to steal authenticated user data via credentialed cross-origin requests. The exploit uses a Flask server to host a malicious page that exfiltrates user data when visited by a logged-in victim.