Labs

Short research notes on newly disclosed vulnerabilities: the problem, the payload, and the fix.

• highCVE-2026-87999

  CVE-2026-87999: Open WebUI SSRF via Azure Platform Channel Address Bypass

  A flaw in Open WebUI's address screening let any logged-in user trick the server into fetching internal Azure infrastructure endpoints, including the Azure platform channel, and read the response…

• highCVE-2026-87996

  CVE-2026-87996: open-webui DNS Rebinding SSRF in Playwright Web Loader

  When Open WebUI uses Playwright as its web loader, an authenticated user can trick the server into fetching internal-only addresses (like cloud metadata or loopback admin APIs) by pointing a hostname…

• highCVE-2026-86082

  CVE-2026-86082: n8n OpenAI Chat Model Node SSRF via Unguarded Model-Search Endpoint

  A gap in n8n's OpenAI Chat Model node lets a workflow editor point the model-search dropdown at any server on the internet, bypassing the credential domain allowlist and leaking the attached API key…

• highCVE-2026-87995

  CVE-2026-87995: Open WebUI Same-Origin XSS to Account Takeover via Terminal Port-Preview iframe

  A hardcoded allow-same-origin in Open WebUI's terminal port-preview iframe let any authenticated user with shared terminal access steal session tokens and take over accounts by serving a malicious…

• highCVE-2026-86076

  CVE-2026-86076: n8n Expression Sandbox Escape via Class-Field Sanitizer Rebinding

  A flaw in n8n's expression compiler lets an attacker overwrite the internal sanitizer function using a class field, bypassing all property access checks and reaching the JavaScript Function…

• highCVE-2026-86075

  CVE-2026-86075: n8n Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration

  Any unauthenticated attacker can crash an n8n instance by spamming the OAuth client-registration endpoint with oversized field values, filling the database until the service stops working.

• highCVE-2026-86081

  CVE-2026-86081: n8n Regular Expression Denial of Service via Git Node Clone Path

  A crafted clone destination path fed to n8n's Git node triggers catastrophic backtracking in the default file-block regex, letting any authenticated user freeze the entire n8n instance with a single…

• high

  @eigenpal/docx-editor-core: CSS Injection and Print-Time XSS via Unescaped Font Name

  A crafted .docx file with a malicious embedded font name injects attacker-controlled CSS into any page that opens the file, and escalates to full script execution the moment a user clicks Print.

• highCVE-2026-59158

  CVE-2026-59158: nuxt-ollama API Key Exposed in SSR HTML Payload

  nuxt-ollama placed the Ollama cloud API key inside Nuxt's public runtime config, causing it to appear in plaintext inside every server-rendered HTML page, readable by anyone with a browser or curl.

• highCVE-2026-59160

  CVE-2026-59160: @yeger/turbo-graph Unauthenticated Remote Task Execution

  A developer tool for visualizing Turborepo task graphs accidentally exposes an unauthenticated HTTP endpoint to the local network, letting any nearby attacker silently run arbitrary build tasks with…

• high

  Komari: Management Interface CSRF Leading to Remote Code Execution

  Komari's admin API sets its session cookie without SameSite or Secure attributes and has no CSRF token or Origin validation, so a malicious page can trick a logged-in admin into executing arbitrary…

• highCVE-2026-59172

  CVE-2026-59172: Joker Linter Project-Local Code Execution

  Running 'joker --lint' on an untrusted repository automatically executes any .jokerd/linter.* file found in the project tree, letting an attacker ship arbitrary Joker code that runs on the…