Files
CVEs-PoC/2025/CVE-2025-9036.md
T
2025-09-29 21:09:30 +02:00

827 B

CVE-2025-9036

Description

A security issue in the runtime event system allows unauthenticated connections to receive a reusable API token. This token is broadcasted over a WebSocket and can be intercepted by any local client listening on the connection.

POC

Reference

No PoCs from references.

Github