Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.6
CVE-2026-46409: OpenYak Desktop Backend Unsecured Local Server
CVE-2026-46409 · published 27 days ago
Summary
OpenYak's desktop backend, used in a local workspace, allows malicious web pages to access and control the local server. This allows hackers to execute commands on the host, access sensitive data, and even shut down the service. To fix this issue, update OpenYak to version 1.1.3 or later.
Original advisory text
OpenYak is a local-first agent runtime for reliable tool-using models, with a desktop workspace built on top. Prior to version 1.1.3, the OpenYak desktop backend binds an HTTP API to `127.0.0.1:<ra...
OpenYak is a local-first agent runtime for reliable tool-using models, with a desktop workspace built on top. Prior to version 1.1.3, the OpenYak desktop backend binds an HTTP API to `127.0.0.1:<random port>` (commonly 19141) without server-side Origin validation, loopback authentication, or Content-Type enforcement, and with a wildcard CORS policy. Any webpage a user visits while OpenYak is running can issue cross-origin requests to this local server — the browser acts as a proxy into loopback, bypassing OS-level network isolation. Chained, this lets a malicious page execute arbitrary shell commands on the host (RCE) via the build agent with `permission_presets.bash=true`, shut down the service, and exfiltrate chat history and account PII — with no user interaction beyond opening the page. Version 1.1.3 patches the issue.
Severity
9.6
Critical
CVSS 3.1: 9.6 (NVD)
CVSS 3.1: 9.6 (OSV)
Exploitation
EPSS <1%
Type
CWE-94Code Injection
CWE-306Missing Authentication for Critical Function
CWE-346Origin Validation Error
CWE-352Cross-Site Request Forgery (CSRF)
CWE-942Permissive Cross-domain Security Policy with Untrusted Domains
Timeline
Published7 Aug 2026
Updated30 Aug 2026
First seen8 Aug 2026
Monitor software like this
Free during beta