Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-29 · source-backed
CVE-2026-55641: the request guard decides a caller is local by reading the client-controlled Host header, and the server binds 0.0.0.0 by default while the CLI prints "localhost." Any remote attacker sending Host: localhost gets /v1 proxy access with no API key, no CLI token and no login, plus unauthenticated SSRF through the built-in noAuth searxng provider. Its sibling, CVE-2026-55638, authorizes on the pre-rewrite Next.js path, and /codex/* isn't in the protected prefix list but rewrites to the same backend. Both turn the operator's stored paid provider credentials into an open relay. (GitHub Advisory)
Each link below shares sources, entities, or timing with this story.
LLM uses OpenAI / Shared entities / Earlier coverage / Tension
Linked by a graph relationship (LLM uses OpenAI); both cover CVE, SSRF; earlier CVE coverage from 2026-07-23.
LLM uses OpenAI / Shared entity: LLM / Same source domain / Earlier coverage / Tension
Linked by a graph relationship (LLM uses OpenAI); both cover LLM; reported by the same outlet (github.com).
LLM uses OpenAI / Shared entities / Earlier coverage
Linked by a graph relationship (LLM uses OpenAI); both cover CVE, SSRF; earlier CVE coverage from 2026-08-08.
Simon Willison released LLM / Shared entities / Earlier coverage
Linked by a graph relationship (Simon Willison released LLM); both cover CLI, LLM; earlier CLI coverage from 2026-08-05.
Simon Willison released LLM / Shared entity: CLI / Same source domain / Earlier coverage
Linked by a graph relationship (Simon Willison released LLM); both cover CLI; reported by the same outlet (github.com).
Simon Willison released LLM / Shared entity: LLM / Same source domain / Earlier coverage
Linked by a graph relationship (Simon Willison released LLM); both cover LLM; reported by the same outlet (github.com).
Simon Willison released LLM / Shared entity: Next / Earlier coverage / Tension
Linked by a graph relationship (Simon Willison released LLM); both cover Next; earlier Next coverage from 2026-08-28.
Simon Willison released LLM / Shared entity: LLM / Earlier coverage / Tension
Linked by a graph relationship (Simon Willison released LLM); both cover LLM; earlier LLM coverage from 2026-08-16.