Weaknesses of type CWE-441

231 results

Deputado Confuso (Proxy ou Intermediário Não Intencional)

Quando um componente intermediário (servidor, API, função, etc.) executa ações em nome de um cliente sem validar adequadamente quem realmente autorizou aquela ação, um atacante consegue explorar a confiança já estabelecida entre esse intermediário e outros sistemas. O intermediário acaba agindo como 'procurador involuntário' do atacante, realizando operações que o sistema final nunca autorizaria se a requisição viesse diretamente do atacante.

Example

Um servidor de cache proxy que aceita requisições GET de qualquer origem e as repassa a um serviço interno sem verificar se o cliente original deveria ter acesso àqueles dados. Um atacante faz o proxy buscar informações sensíveis do servidor interno e devolver para si, usando a confiança que o servidor interno tem no proxy.

How to mitigate

Valide a identidade e autorização do cliente original antes de repassar requisições para sistemas internos; use tokens ou assinaturas criptográficas que viagem junto com a requisição; implemente listas de origem segura (whitelist) rigorosas e autenticação mútua entre componentes intermediários e backends.

CVE-2025-25306CRITICALMisskey's Incomplete Patch of CVE-2024-52591 Leads to Forgery of Federated NotesEPSS 0.2%CVE-2026-41365MEDIUMOpenClaw < 2026.3.31 - Sender Allowlist Bypass via Graph API Thread HistoryEPSS 0.2%CVE-2026-95328MEDIUMConfused deputy in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker leveraging social engineering to obEPSS 0.2%CVE-2026-0013HIGHIn setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confused deputy. This couldEPSS 0.2%CVE-2026-106462MEDIUMBackstage: Scaffolder credential handling may allow unintended GitHub authentication fallbackEPSS 0.2%CVE-2024-31319HIGHIn updateNotificationChannelFromPrivilegedListener of NotificationManagerService.java, there is a possible cross-user data leak due to a conEPSS 0.2%CVE-2026-106427MEDIUMConfused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions iEPSS 0.2%CVE-2026-9595MEDIUMwebpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxiesEPSS 0.2%CVE-2026-84616MEDIUMA type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, mEPSS 0.1%CVE-2026-49903MEDIUMThe `ClusterRenderingService.dump()` method, accessible to processes holding `android.permission.DUMP` and `android.permission.PACKAGE_USAGEEPSS 0.1%CVE-2026-0008HIGHIn multiple functions of FaceEnroll.kt, there is a possible privilege escalation due to a confused deputy. This could lead to local escalatiEPSS 0.1%CVE-2026-49906HIGHAn unprivileged application can bypass the `android.car.permission.CAR_DISPLAY_IN_CLUSTER` permission by registering an activity with the `aEPSS 0.1%CVE-2025-22441HIGHIn getContextForResourcesEnsuringCorrectCachedApkPaths of RemoteViews.java, there is a possible way to load arbitrary java code in a privileEPSS 0.1%CVE-2026-44992MEDIUMOpenClaw 2026.4.5 through 2026.4.19 - MiniMax API Host Override via Workspace dotenvEPSS 0.1%CVE-2026-67077MEDIUMHCL BigFix AEX is affected by multiple security vulnerabilities.EPSS 0.1%CVE-2023-31313HIGHAn unintended proxy or intermediary in the AMD power management firmware (PMFW) could allow a privileged attacker to send malformed messagesEPSS 0.1%CVE-2026-93320MEDIUMBuildKit improperly handles special files in build snapshotsEPSS 0.1%CVE-2025-48598MEDIUMIn multiple locations, there is a possible way to alter the primary user's face unlock settings due to a confused deputy. This could lead toEPSS 0.1%CVE-2025-48579HIGHIn multiple functions of MediaProvider.java, there is a possible external storage write permission bypass due to a confused deputy. This couEPSS 0.1%CVE-2026-45003MEDIUMOpenClaw < 2026.4.22 - Connector Endpoint Host Override via Workspace dotenv FilesEPSS 0.1%