Opencode Studio
Monthly
Unauthenticated arbitrary file read in OpenCode Studio before 2.4.4 lets remote attackers pull other users' intermediate audio, video, and subtitle artifacts directly from the GET /api/tmp/:tmpFile and GET /api/music/:fileName endpoints, and delete any rendered video via the unauthenticated DELETE /api/short-video/:videoId endpoint. Reported by VulnCheck and rated CVSS 4.0 9.3, the flaw exposes both confidentiality and integrity of user job data with no login required. Publicly available exploit code exists, though there is no public exploit identified as being used in active attacks.
Unauthenticated arbitrary file read in OpenCode Studio before 2.4.4 lets remote attackers pull other users' intermediate audio, video, and subtitle artifacts directly from the GET /api/tmp/:tmpFile and GET /api/music/:fileName endpoints, and delete any rendered video via the unauthenticated DELETE /api/short-video/:videoId endpoint. Reported by VulnCheck and rated CVSS 4.0 9.3, the flaw exposes both confidentiality and integrity of user job data with no login required. Publicly available exploit code exists, though there is no public exploit identified as being used in active attacks.