CVE-2025-69443: Archon OS Unauth API Key Leak & RCE via Web-to-Client

CVE-2025-69443: Archon OS Unauthorized Web-to-Client Attack Vulnerability Summary Vulnerability Overview Archon OS contains a critical security vulnerability (CVE-2025-69443) that allows malicious web pages to cross the Web-to-Client boundary via unauthenticated local network requests. An attacker can steal sensitive environment variables (including OpenAI, Grok, and Google API keys) and execute arbitrary commands by accessing the backend port, which lacks CORS protection and authentication. Scope of Impact Affected Versions: 0.1.0 through 0.3.11 (all versions) Severity: High Impact: - Leakage of API keys and private information - Unauthorized remote command execution - Full control over Agent functionality (enabling/disabling UI elements, invoking Agents on behalf of the user, reading private data) - Financial risk: Abused LLM API keys may lead to unauthorized model consumption and billing exposure Remediation For Archon Users: Do not expose port 8181 to external networks; bind it to and restrict access via firewall rules. Do not store sensitive API keys within Archon until backend authentication is implemented. Avoid running unauthenticated local services that handle credentials or perform actions on your behalf. For Archon Maintainers: Implement authentication on the backend port (8181), not just at the UI layer. Consistently apply CORS restrictions across all exposed ports. Add port-level access control as a baseline before introducing any deployment support. Technical Details Attack Path: - Port 3737 (UI Layer): Protected by CORS; external requests are correctly blocked. - Port 8181 (Backend Layer): Lacks CORS protection and authentication, directly returning configured API keys. Disclosure Timeline: - November 24, 2025: OX contacted the Archon team via GitHub; no official response was received. - December 22, 2025: OX followed up, and the maintainer replied: "This is just a local app; once we support deployment, I will realize these issues!" Broader Context This finding is part of OX Security's ongoing MCP research initiative. As a downstream MCP hub, Archon highlights how trust boundaries between the web, local services, and agent infrastructure become attack surfaces as AI agents become more deeply embedded in developer workflows. This vulnerability is a specific example of what happens when these boundaries are not strictly enforced.

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2025-69443: Archon OS Unauth API Key Leak & RCE via Web-to-Client