AIKIDO-2026-803918

encore.dev is vulnerable to Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery (CSRF)GHSA-wpvj-6m4r-5v3h Published 2 days ago

Critical Risk

This Affects:

encore.dev

0.0.1 - 1.57.12

Fixed in 1.57.13

Are you affected? Scan for Free

TL;DR

The Encore CLI daemon binds several unauthenticated HTTP servers to loopback addresses, and after they were moved to deterministic ports any website a developer visits can drive them cross-origin from the browser. Affected servers include the MCP introspection server exposing application source, API metadata, databases, logs and traces, the local development dashboard serving captured traces and reverse-proxied API calls, the bucket emulator, and the runtime/trace ingest and pprof endpoints. An Origin header check alone is insufficient because browsers omit Origin on cross-site sub-resource loads, allowing data exfiltration and forged local API calls. The fix adds a shared origin gate that rejects cross-site requests and only allows loopback or non-browser callers.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range and you run the Encore CLI daemon (for example via encore run) while browsing untrusted sites in the same browser profile.