CVE-2026-109823— Host filesystem path disclosure via DNS rebinding

Quick assessment

Affected

tidewave-ai tidewave

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

攻击者可以通过端点或渲染后的工具栏，读取由 Tidewave 配置暴露的您应用程序的文件系统路径名称。上述响应均未验证 Host 请求头。因此，一个将自身域名重绑定到回环地址（loopback address）的网页，可以通过同源请求（该请求不携带 Origin 请求头）读取相关标签。这些路径通常会泄露本地用户名和项目目录结构。此漏洞影响 tidewave 从 0.8.0 版本起至 0.9.2 版本之前的所有版本。

CVSS 2.3 · Low Updated Oct 28, 2026

Possible ATT&CK Techniques 2 AI

T1082 · System Information Discovery T1190 · Exploit Public-Facing Application

Affected Version Matrix 2

Vendor	Product	Version Range	Status
tidewave-ai	tidewave	`0.8.0< 0.9.2`	affected
		`f78352b56d19cd4ae49999aa385011cef73e8b93< 80159536f752dc4d34797934d1516f29cea12b50`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Host filesystem path disclosure via DNS rebinding

Source: CVE Program / CVE List V5

Vulnerability Description

An attacker can read the name of filesystem paths of your application present via Tidewave configuration via /tidewave/connect or via the rendered toolbar. Neither response checks the Host header. A web page that rebinds its own domain to the loopback address can therefore read the tag with a same-origin request, which carries no Origin header. The paths usually reveal the local username and the project layout. This issue affects tidewave: from 0.8.0 before 0.9.2.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Source: CVE Program / CVE List V5

Vulnerability Type

将系统数据暴露到未授权控制的范围

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
tidewave-ai	tidewave	0.8.0 ~ 0.9.2	`cpe:2.3:a:tidewave-ai:tidewave::::::::`
tidewave-ai	tidewave	f78352b56d19cd4ae49999aa385011cef73e8b93 ~ 80159536f752dc4d34797934d1516f29cea12b50	`cpe:2.3:a:tidewave-ai:tidewave::::::::`

II. Public POCs for CVE-2026-109823

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-109823

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-109823 (1)

🔗 Add Tidewave toolbar · tidewave-ai/tidewave_phoenix@f78352b · GitHub Read full article related

Vendor Advisories for CVE-2026-109823 (2)

🔗 EEF-CVE-2026-109823 - OSV related
🔗 CVE-2026-109823 Read full article related third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-109823

IV. Related Vulnerabilities

Same weakness: CWE-497