Openyak vulnerabilities
We track 1 vulnerability in Openyak products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 7, 2026.
1vulnerabilities
1critical
0high
0exploited
9.6average CVSS score
Latest Openyak vulnerabilities
- 9.6 Critical severity
openyak: Improper Control of Generation of Code
OpenYak is a local-first agent runtime for reliable tool-using models, with a desktop workspace built on top. Prior to version 1.1.3, the OpenYak desktop backend binds an HTTP API to `127.0.0.1:<random port>` (commonly 19141) without server-side Origin validat