Openziti
6 CVEs across 4 Openziti products. Browse Openziti vulnerabilities, severities, and proof-of-concept exploits.
Openziti products with known CVEs
Openziti CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-45576 | High | 7.5 | 2026-07-16 | zrok is software for sharing web services, files, and network resources. From 0.4.23 until 2.0.3, `zrok2 copy` stores attacker-controlled WebDAV or zrok drive… |
CVE-2026-45568 | Critical | 9.1 | 2026-07-16 | zrok is software for sharing web services, files, and network resources. Prior to 2.0.3, zrok's Python SDK ProxyShare Flask proxy route accepts an absolute URL… |
CVE-2026-58165 | High | 8.8 | 2026-06-30 | OpenZiti through 2.0.0, fixed in commit 3027fdf, contains a privilege escalation vulnerability that allows authenticated non-admin identities with fine-grained… |
CVE-2026-42275 | High | 8.7 | 2026-05-08 | zrok is software for sharing web services, files, and network resources. Prior to version 2.0.2, the zrok WebDAV drive backend (davServer.Dir) restricts path t… |
CVE-2026-40304 | Medium | 5.3 | 2026-04-17 | zrok is software for sharing web services, files, and network resources. Prior to version 2.0.1, the unaccess handler (controller/unaccess.go) contains a logic… |
CVE-2026-40303 | High | 7.5 | 2026-04-17 | zrok is software for sharing web services, files, and network resources. Prior to version 2.0.1, endpoints.GetSessionCookie parses an attacker-supplied cookie… |
CVE-2026-40302 | Medium | 6.1 | 2026-04-17 | zrok is software for sharing web services, files, and network resources. Prior to version 2.0.1, the proxyUi template engine uses Go's text/template (which per… |
CVE-2025-27501 | High | 8.6 | 2025-03-03 | OpenZiti is a free and open source project focused on bringing zero trust to any application. An endpoint on the admin panel can be accessed without any form o… |
CVE-2025-27500 | High | 8.2 | 2025-03-03 | OpenZiti is a free and open source project focused on bringing zero trust to any application. An endpoint(/api/upload) on the admin panel can be accessed witho… |