CORS Bypass (CWE-942) in OpenYak Desktop Local HTTP API

CVE-2026-46409

Aug 7, 2026

Deferred

Category:

CORS Misconfiguration

CWE:

CWE-94;CWE-306;CWE-346;CWE-352;CWE-942

Impact:

Remote Code Execution and Sensitive Data Exposure

Severity:

CRITICAL RISK

(9.6)

CVSS Version:

3.1

Detect vulnerable code directly in pull requests, so CVEs are fixed before merge.

Get Started

text

NDV

[GET STARTED]

Find out what's already

START PENTEST

NO CC REQUIRED

BOOK A DEMO

CodeAnt AI

355 Bryant St, San Francisco, CA 94107

CodeAnt AI

355 Bryant St, San Francisco, CA 94107