CVE-2025-59956

AgentAPI is an HTTP API for Claude Code, Goose, Aider, Gemini, Amp, and Codex. Versions 0.3.3 and below are susceptible to a client-side DNS rebinding attack when hosted over plain HTTP on localhost. An attacker can gain access to the /messages endpoint served by the Agent API. This allows for the unauthorized exfiltration of sensitive user data, specifically local message history, which can include secret keys, file system contents, and intellectual property the user was working on locally. This issue is fixed in version 0.4.0.

• CWE-350
• CWE-290

• https://github.blog/security/application-security/localhost-dangers-cors-and-dns-rebindingTechnical Description
• https://github.com/coder/agentapi/commit/5c425c62447b8a9eac19e9fc5a2eae7f0803f149Patch
• https://github.com/coder/agentapi/pull/49Issue Tracking, Patch
• https://github.com/coder/agentapi/releases/tag/v0.4.0Release Notes
• https://github.com/coder/agentapi/security/advisories/GHSA-w64r-2g3w-w8w4Patch, Vendor Advisory
• https://mcpsec.dev/advisories/2025-09-19-coder-chat-exfiltrationExploit, Third Party Advisory
• https://mcpsec.dev/advisories/2025-09-19-coder-chat-exfiltration/Exploit, Third Party Advisory

Published

Sep 30, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-5995Canon EOS Webcam Utility Pro for MAC OS version 2.3d (2.3.29…4.6
• CVE-2025-59950FreshRSS is a free, self-hostable RSS aggregator. In version…5.4
• CVE-2025-59951Termix is a web-based server management platform with SSH te…9.1
• CVE-2025-59952MinIO Java SDK is a Simple Storage Service (aka S3) client t…8.7
• CVE-2025-59954Knowage is an open source analytics and business intelligenc…9.8
• CVE-2025-59955Coolify is an open-source and self-hostable tool for managin…5.7
• CVE-2025-59957An Origin Validation Error vulnerability in an insufficient …7
• CVE-2025-59958An Improper Check for Unusual or Exceptional Conditions vuln…6.9
• CVE-2025-59959An Untrusted Pointer Dereference vulnerability in the routin…6.8
• CVE-2025-5996An issue has been discovered in GitLab CE/EE affecting all v…6.5
• CVE-2025-59960An Improper Check for Unusual or Exceptional Conditions vuln…7.4
• CVE-2025-59961An Incorrect Permission Assignment for Critical Resource vul…6.8