CVE-2024-43798

Chisel is a fast TCP/UDP tunnel, transported over HTTP, secured via SSH. The Chisel server doesn't ever read the documented `AUTH` environment variable used to set credentials, which allows any unauthenticated user to connect, even if credentials were set. Anyone running the Chisel server that is using the `AUTH` environment variable to specify credentials to authenticate against is affected by this vulnerability. Chisel is often used to provide an entrypoint to a private network, which means services that are gated by Chisel may be affected. Additionally, Chisel is often used for exposing services to the internet. An attacker could MITM requests by connecting to a Chisel server and requesting to forward traffic from a remote port. This issue has been addressed in release version 1.10.0. All users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-306
• CWE-1068

• https://github.com/jpillora/chisel/security/advisories/GHSA-38jh-8h67-m7mj

Published

Aug 26, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-43792Halo is an open source website building tool. A security vul…6.1
• CVE-2024-43793Halo is an open source website building tool. A security vul…6.4
• CVE-2024-43794OpenSearch Dashboards Security Plugin adds a configuration m…6.1
• CVE-2024-43795OpenC3 COSMOS provides the functionality needed to send comm…6.1
• CVE-2024-43796Express.js minimalist web framework for node. In express < 4…4.7
• CVE-2024-43797audiobookshelf is a self-hosted audiobook and podcast server…4.3
• CVE-2024-43799Send is a library for streaming files from the file system a…4.7
• CVE-2024-43800serve-static serves static files. serve-static passes untrus…4.7
• CVE-2024-43801Jellyfin is an open source self hosted media server. The Jel…5.4
• CVE-2024-43802Vim is an improved version of the unix vi text editor. When …4.5
• CVE-2024-43803The Bare Metal Operator (BMO) implements a Kubernetes API fo…4.9
• CVE-2024-43804Roxy-WI is a web interface for managing Haproxy, Nginx, Apac…8.8