CVE-2026-121821
— UNSCOREDpublic exploit availablePublished 2026-11-06 · Updated 2026-11-06
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
A vulnerability has been identified in armeria versions 0.84.0 through 1.42.0, where any-origin CORS policies do not enforce configured path restrictions, allowing an attacker-controlled website visited by an authenticated victim to read sensitive responses from excluded paths when credentials are enabled and the victim's browser sends authentication credentials.
Public exploit & PoC references
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.