{"affected":[{"product":"lavish-axi","source":"CNA: GitHub_M","vendor":"kunchenguid","versions":[{"status":"affected","version":"< 0.1.43"}]}],"cveId":"CVE-2026-102344","cwes":["CWE-73","CWE-306","CWE-346","CWE-1427"],"description":"Lavish is the new editor for your HTML artifacts. Prior to 0.1.43, the lavish-axi loopback HTTP server did not authenticate requests or validate Host and Origin values on session, artifact, prompt, and polling routes. A website visited while the server is running can use DNS rebinding to send same-origin browser requests to the local service. POST /api/sessions accepts a caller-selected file path and returns its deterministic session key; GET /artifact/:key/index.html then returns the file contents, allowing disclosure of any file readable by the server process without an existing session. An attacker can also queue text through POST /api/:key/prompts for an active agent session when the artifact path is known or guessed. Visiting the attacker-controlled website is the required user interaction. This vulnerability is fixed in 0.1.43.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8.1,"severity":"high","source":"CNA: GitHub_M","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","version":"3.1"},{"score":8.1,"severity":"high","source":"NVD: security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","version":"3.1"}],"modifiedAt":1793999825323,"publishedAt":1793997564318,"references":[{"source":"CNA: GitHub_M","tags":["x_refsource_CONFIRM"],"url":"https://github.com/kunchenguid/lavish-axi/security/advisories/GHSA-fwx2-qmmq-qvx2"},{"source":"CNA: GitHub_M","tags":["x_refsource_MISC"],"url":"https://github.com/kunchenguid/lavish-axi/commit/f016972251556a83cd4712cf081a475cfcf3646a"},{"source":"CNA: GitHub_M","tags":["x_refsource_MISC"],"url":"https://github.com/kunchenguid/lavish-axi/releases/tag/lavish-axi-v0.1.43"},{"source":"security-advisories@github.com","tags":[],"url":"https://github.com/kunchenguid/lavish-axi/commit/f016972251556a83cd4712cf081a475cfcf3646a"},{"source":"security-advisories@github.com","tags":[],"url":"https://github.com/kunchenguid/lavish-axi/releases/tag/lavish-axi-v0.1.43"},{"source":"security-advisories@github.com","tags":[],"url":"https://github.com/kunchenguid/lavish-axi/security/advisories/GHSA-fwx2-qmmq-qvx2"}],"remediation":[],"revision":"9e573369fd89578a905683f89cf3a1b1fbf9fc996386be158d94f07167ea0042","sources":[{"modifiedAt":1793997581255,"name":"CNA: GitHub_M","retrievedAt":1793999324663,"url":"https://www.cve.org/CVERecord?id=CVE-2026-102344"},{"modifiedAt":1793999825323,"name":"NVD","retrievedAt":1794011250349,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102344"}],"ssvc":null,"status":"published","title":"Lavish: DNS rebinding allows any website to read arbitrary local files and inject prompts into the AI agent via the unauthenticated local server","updatedAt":1794011250349}