test

[August829]

Dear CVE Assignment Team,

Thank you for assigning the CVE IDs. After reviewing the descriptions with the vulnerability details and references, I would like to provide the following corrected information for each CVE before publication. Please replace the previous descriptions with the updated ones below.

---

CVE-2026-50755

• Product: next-ai-draw-io 0.4.13
• Vendor: DayuanJiang
• Vulnerability Type: Authentication Bypass by Spoofing (CWE-290)
• Affected Component: X-Forwarded-For header handling in lib/user-id.ts
• Attack Vector: Remote
• Impact: User identity forgery leading to quota bypass, user impersonation, and telemetry data poisoning
• Description: An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to forge user identities via the X-Forwarded-For header value. The application derives user identity exclusively from the client-controlled X-Forwarded-For header without any validation or authentication, enabling quota/rate-limit bypass, impersonation of other users, and corruption of telemetry data.
• References: User Identity Forgery via X-Forwarded-For Header Spoofing in next-ai-draw-io DayuanJiang/next-ai-draw-io#750
• Credit: Yu Bao

---

CVE-2026-50756

• Product: next-ai-draw-io 0.4.13
• Vendor: DayuanJiang
• Vulnerability Type: Server-Side Request Forgery (SSRF) (CWE-918)
• Affected Component: x-ai-provider header / SSRF guard in lib/ai-providers.ts
• Attack Vector: Remote
• Impact: System prompt leakage, user data exfiltration, and internal service probing
• Description: An SSRF vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to bypass the SSRF guard and redirect server-side AI API calls to attacker-controlled endpoints via the x-ai-provider header set to "edgeone" or "ollama", resulting in the leakage of the full system prompt and user conversation data.
• References: SSRF Guard Bypass via EdgeOne/Ollama Provider Spoofing in next-ai-draw-io DayuanJiang/next-ai-draw-io#749
• Credit: Yu Bao

---

CVE-2026-50757

• Product: next-ai-draw-io 0.4.13 / @next-ai-drawio/mcp-server <= 0.1.16
• Vendor: DayuanJiang
• Vulnerability Type: Path Traversal / Arbitrary File Write (CWE-22)
• Affected Component: next-ai-draw-io/mcp-server export_diagram tool
• Attack Vector: Local
• Impact: Arbitrary file write to any user-accessible path, potentially leading to code execution
• Description: Path Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a local attacker to write arbitrary files to any user-accessible path via the next-ai-draw-io/mcp-server export_diagram tool, which accepts an unsanitized path parameter and writes diagram content without path validation.
• References: 58ead8e7e02026012 #18
• Credit: Yu Bao

---

CVE-2026-50758

• Product: next-ai-draw-io 0.4.13 / @next-ai-drawio/mcp-server <= 0.1.16
• Vendor: DayuanJiang
• Vulnerability Type: Cross Site Scripting (XSS) (CWE-79)
• Affected Component: mcp query parameter in MCP server HTTP interface
• Attack Vector: Remote
• Impact: Arbitrary JavaScript execution in the victim's browser, leading to diagram data theft and session manipulation
• Description: Cross Site Scripting vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to execute arbitrary JavaScript code via the mcp URL query parameter. The session ID is interpolated directly into both HTML and JavaScript contexts without any escaping or sanitization.
• References: 58ead8e7e02026011 #17
• Credit: Yu Bao

---

CVE-2026-50759

• Product: exo 1.0.69
• Vendor: exo-explore
• Vulnerability Type: Missing Authentication for Critical Function (CWE-306)
• Affected Component: GET /state and DELETE /instance/{instance_id} endpoints
• Attack Vector: Remote
• Impact: Unauthenticated remote termination of all inference instances, leading to denial of service
• Description: An issue in exo-explore exo 1.0.69 allows a remote attacker to enumerate and terminate all running model inference instances via the unauthenticated GET /state and DELETE /instance/{instance_id} endpoints, causing complete service disruption without any authentication.
• References: Unauthenticated Remote Instance Termination exo-explore/exo#1833
• Credit: Yu Bao

---

CVE-2026-50760

• Product: OpenBB 1.5.1
• Vendor: OpenBB-finance
• Vulnerability Type: Server-Side Request Forgery (SSRF) (CWE-918)
• Affected Component: htm_file.py:SecHtmFileFetcher
• Attack Vector: Remote
• Impact: Internal network reconnaissance, cloud metadata credential theft, and internal service interaction
• Description: An SSRF vulnerability in OpenBB-finance OpenBB 1.5.1 allows a remote attacker to bypass URL validation and force the server to send HTTP requests to arbitrary hosts via the htm_file.py:SecHtmFileFetcher component, enabling access to cloud metadata services and internal network resources.
• References: 58ead8e7e02026030 #36
• Credit: Yu Bao

---

Please proceed with publication using the corrected descriptions above. Let me know if any further clarification is needed.

Best regards,
Yu Bao