GHSA-w9x9-j56r-h98r: @eeacms/volto-chatbot has Unauthenticated Danswer API Confused Deputy Proxy

Summary

@eeacms/volto-chatbot@2.0.3 registers an Express middleware on `**/_v1_da/**` that forwards unauthenticated requests of any HTTP method to the configured Danswer API, attaching the server-side DANSWER_API_KEY or session cookie. Because the path is derived from req.url with no allowlist or method restriction, an unauthenticated attacker can call arbitrary Danswer endpoints, including admin ones, as the service account.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Related items

• HighCVE-2026-118758: Kubeflow Pipelines path traversal in GET /artifacts/get volume handlerSimilar attack · NVD/CVE Database
• HighGHSA-q344-5v34-gm84: @sylphx/pdf-reader-mcp: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEYSimilar attack · GitHub Advisory Database
• HighGHSA-26mh-57q7-jfvr: PraisonAI vulnerable to Remote Code Execution via Broken AST SandboxSimilar attack · GitHub Advisory Database
• CriticalCVE-2026-110186: IBM Langflow OSS remote arbitrary code execution via code generationSimilar attack · NVD/CVE Database
• CriticalCVE-2026-107329: IBM Langflow OSS arbitrary code execution via code generationSimilar attack · NVD/CVE Database