CVE-2026-46409 | OpenYak up to 1.1.2 Desktop Backend cross-domain policy

August 7, 2026 Yanac

A vulnerability classified as problematic has been found in OpenYak up to 1.1.2. This issue affects some unknown processing of the component Desktop Backend. This manipulation causes permissive cross-domain policy with untrusted domains.

This vulnerability is tracked as CVE-2026-46409. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More