{"id":"EUVD-2026-86991","enisaUuid":"b5fce056-10de-3243-9265-6b7b1ac18ae2","description":"Rojo\u0027s \"rojo serve\" HTTP API (default port 34872) has no Host/Origin header validation, making it vulnerable to DNS rebinding. A malicious webpage can read all project source, write malicious code to files on disk, and launch local programs via opener::open() with no user interaction beyond visiting the page.","datePublished":"Sep 25, 2026, 10:48:47 AM","dateUpdated":"Sep 25, 2026, 4:39:44 PM","baseScore":8.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","references":"https://github.com/rojo-rbx/rojo/pull/1270\nhttps://rustsec.org/advisories/RUSTSEC-2026-0279.html\nhttps://osv.dev/vulnerability/RUSTSEC-2026-0279\n","aliases":"CVE-2026-97875\n","assigner":"redhat-cnalr","epss":0.26,"enisaIdProduct":[{"id":"c7438d87-cc6c-35bf-b2f1-4dc4010762fb","product":{"name":"rojo","vendor":{"name":"rojo-rbx"}},"product_version":"0 \u003c7.7.0"}],"enisaIdVendor":[{"id":"67ea4aef-bdfd-3c96-8d99-fb40fd0e0c3e","vendor":{"name":"rojo-rbx"}}],"enisaIdVulnerability":[{"id":"229f1cff-aab5-3ce5-b9c5-3fa1857d20f0","vulnerability":{"id":"CVE-2026-97875","description":"Rojo\u0027s \"rojo serve\" HTTP API (default port 34872) has no Host/Origin header validation, making it vulnerable to DNS rebinding. A malicious webpage can read all project source, write malicious code to files on disk, and launch local programs via opener::open() with no user interaction beyond visiting the page.","datePublished":"Sep 25, 2026, 10:48:47 AM","dateUpdated":"Sep 25, 2026, 4:39:44 PM","status":"PUBLISHED","baseScore":8.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","references":"https://github.com/rojo-rbx/rojo/pull/1270\nhttps://rustsec.org/advisories/RUSTSEC-2026-0279.html\nhttps://osv.dev/vulnerability/RUSTSEC-2026-0279\n","enisa_id":"EUVD-2026-86991\n","assigner":"redhat-cnalr","epss":0.26,"dataProcessed":"Oct 30, 2026, 7:13:27 AM","vulnerabilityProduct":[{"id":"b6d8d2fe-d7f0-3424-9a62-5607e8c9d457","product":{"name":"rojo","vendor":{"name":"rojo-rbx"}},"product_version":"0 \u003c7.7.0"}],"vulnerabilityVendor":[{"id":"a9b01666-4c2e-3a4b-9402-0b3aae78b7f1","vendor":{"name":"rojo-rbx"}}]}}],"enisaIdAdvisory":[]}