Genkit-ai vulnerabilities
We track 1 vulnerability in Genkit-ai products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 11, 2026.
1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score
Latest Genkit-ai vulnerabilities
- 7.8 High severity
genkit: Improper Neutralization of HTTP Headers for Scripting Syntax
Genkit does not properly validate host request headers. Any host on the developer's network, and any website the developer visits (via DNS rebinding), can reach POST /api/runAction on the Dev UI server (default port 4000) and execute any registered Genkit acti