CVE-2026-66005 | janhq Jan up to 0.8.4 Local API Server cross-domain policy

July 24, 2026 Yanac

A vulnerability categorized as problematic has been discovered in janhq Jan up to 0.8.4. This issue affects some unknown processing of the component Local API Server. Executing a manipulation can lead to permissive cross-domain policy with untrusted domains.

This vulnerability is handled as CVE-2026-66005. The attack can be executed remotely. There is not any exploit available.

Applying a patch is advised to resolve this issue.VulDB Recent EntriesRead More