Caido vulnerabilities
We track 2 vulnerabilities in Caido products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 13, 2026.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Caido vulnerabilities
- 9.8 Critical severity
caido: Authentication Bypass by Spoofing
Caido is a web security auditing toolkit. Prior to 0.55.0, Caido blocks non whitelisted domains to reach out through the 8080 port, and shows Host/IP is not allowed to connect to Caido on all endpoints. But this is bypassable by injecting a X-Forwarded-Host: 1
- 7.5 High severity
caido: Authentication Bypass by Spoofing
Caido is a web security auditing toolkit. Prior to version 0.48.0, due to the lack of protection for DNS rebinding, Caido can be loaded on an attacker-controlled domain. This allows a malicious website to hijack the authentication flow of Caido and achieve cod