CVE-2024-2056

Services that are running and bound to the loopback interface on the Artica Proxy are accessible through the proxy service. In particular, the "tailon" service is running, running as the root user, is bound to the loopback interface, and is listening on TCP port 7050. Security issues associated with exposing this network service are documented at gvalkov's 'tailon' GitHub repo. Using the tailon service, the contents of any file on the Artica Proxy can be viewed.

• CWE-288
• CWE-552

• http://seclists.org/fulldisclosure/2024/Mar/14Exploit, Mailing List, Third Party Advisory
• https://github.com/gvalkov/tailon#securityNot Applicable
• https://korelogic.com/Resources/Advisories/KL-001-2024-004.txtExploit, Third Party Advisory
• http://seclists.org/fulldisclosure/2024/Mar/14Exploit, Mailing List, Third Party Advisory
• https://github.com/gvalkov/tailon#securityNot Applicable
• https://korelogic.com/Resources/Advisories/KL-001-2024-004.txtExploit, Third Party Advisory

Published

Mar 5, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-20537A vulnerability in the web-based management interface of Cis…6.5
• CVE-2024-20538A vulnerability in the web-based management interface of Cis…6.1
• CVE-2024-20539A vulnerability in the web-based management interface of Cis…4.8
• CVE-2024-2054The Artica-Proxy administrative web application will deseria…9.8
• CVE-2024-20540A vulnerability in the web-based management interface of Cis…5.4
• CVE-2024-2055The "Rich Filemanager" feature of Artica Proxy provides a we…9.8
• CVE-2024-2057A vulnerability was found in LangChain langchain_community 0…9.8
• CVE-2024-2058A vulnerability was found in SourceCodester Petrol Pump Mana…7.2
• CVE-2024-2059A vulnerability was found in SourceCodester Petrol Pump Mana…7.2
• CVE-2024-2060A vulnerability classified as critical has been found in Sou…7.2
• CVE-2024-2061A vulnerability classified as critical was found in SourceCo…7.2
• CVE-2024-2062A vulnerability, which was classified as critical, has been …7.2