| शीर्षक | Kortix AI Suna < 0.8.39 DOM-XSS, Open Redirect |
|---|
| विवरण | A DOM-based Cross-Site Scripting (XSS) vulnerability has been discovered in Kortix AI Suna's /auth and /auth/password pages. The application improperly trusts a URL parameter (returnUrl), which is passed to router.replace and router.push. An attacker can craft a malicious link that, when opened by an authenticated user, performs a client-side redirect and executes arbitrary JavaScript in the context of their browser. This could lead to session hijacking, credential theft, internal network pivoting, and unauthorized actions performed on behalf of the victim.
---
Note to moderator: The issue was fixed in v0.8.39 without notifying the wider user base via a security disclosure. It is reasonable that users self-hosting the product are unaware of the vulnerability. I have attempted to reach out to the vendor regarding a GitHub security advisory, but they have not responded after a month.
- CVD: https://gist.github.com/TrebledJ/fe7241910ac0aaeff86243fc88e9ffed
- Release v0.8.39: https://github.com/kortix-ai/suna/releases/tag/v0.8.39
- Git Commit: https://github.com/kortix-ai/suna/commit/f5dec7aa0c1b8fa0125938f292c0f2430ca75f6c
- Vendor: https://github.com/kortix-ai
- Product: https://github.com/kortix-ai/suna
Similar entries are VDB-365540, VDB-365539, VDB-356245, and VDB-358037 |
|---|
| स्रोत | ⚠️ https://gist.github.com/TrebledJ/fe7241910ac0aaeff86243fc88e9ffed |
|---|
| उपयोगकर्ता | trebledj (UID 94356) |
|---|
| सबमिशन | 26/05/2026 11:09 AM (4 महीनों पहले) |
|---|
| संयम | 21/06/2026 06:35 AM (26 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 372605 [kortix-ai suna तक 0.8.38 Auth Endpoint page.tsx router.replace/router.push returnURL क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|