CVE-2025-49004

This vulnerability exploits inadequate DNS rebinding protection, a class of attack (CWE-290: Improper Authentication) where an attacker manipulates DNS responses to cause a victim's browser to access attacker-controlled infrastructure while appearing to access a legitimate domain. Caido is a local web security auditing application that likely runs on localhost and provides a web-based dashboard interface. The vulnerability allows an attacker-controlled website to interact with the local Caido instance through the browser's same-origin policy bypass via DNS rebinding. The root cause is the absence of proper Host header validation, DNS pinning, or other DNS rebinding mitigations that would prevent the browser from connecting to attacker infrastructure after an initial legitimate DNS resolution. The authentication flow vulnerability suggests that Caido's authentication mechanism (possibly involving dashboard.caido.io as an OAuth-like provider) can be hijacked when the local instance is compromised.