CVE-2026-46409 openyak CVE debrief

Who should care

Users of OpenYak versions prior to 1.1.3, administrators of systems with OpenYak installed, security teams responsible for monitoring and patching vulnerabilities, and operators of affected platforms should immediately upgrade to prevent exploitation and review system configurations for potential exposure. Affected deployments should be prioritized based on criticality and potential impact. Security teams should also review compensating controls and verify

Why it matters

CVE-2026-46409 is a critical vulnerability in OpenYak that allows for RCE and data exfiltration due to insecure HTTP API configuration. Users of OpenYak versions prior to 1.1.3 should immediately upgrade to prevent exploitation.

• Remote code execution (RCE) via the build agent with permission_presets.bash=true
• Shutdown of the OpenYak service
• Exfiltration of chat history and account PII

Technical summary

The OpenYak desktop backend binds an HTTP API to localhost without server-side Origin validation, loopback authentication, or Content-Type enforcement, and with a wildcard CORS policy. This allows any webpage a user visits to issue cross-origin requests to the local server, effectively bypassing OS-level network isolation. The API can be used to execute arbitrary shell commands via the build agent with permission_presets.bash=true, shut down the service, and exfiltrate chat history and account PII. Users of OpenYak versions prior to 1.1.3 are affected.

Defensive priority

High

Recommended defensive actions

• Immediately upgrade OpenYak to version 1.1.3 or later
• Restrict access to the OpenYak desktop backend API
• Implement server-side Origin validation and loopback authentication
• Enforce Content-Type restrictions and secure CORS policies
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its CVSS score of 9.6 and severity of CRITICAL. The OpenYak desktop backend's insecure configuration allows for RCE and data exfiltration.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.