lavish-axi local server DNS rebinding allows file reads and prompt injection
An attacker's website can peek at your files through an HTML editor tool.
Summary
The local HTTP server in lavish-axi does not check authentication or Host and Origin headers, so a malicious website visited while it runs can use DNS rebinding to read any file the server process can read and inject text into the AI agent. Versions before 0.1.43 are affected.
Affected when
- lavish-axi local server running
- visiting an attacker's website while the server runs
What to do
Update to 0.1.43 or later.
Products and platforms
CVE IDs
Sources
- Write-up: github.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen