CVE-2026-108372 | loopx-project LoopX up to 0.4.4 Status Server loopx/status_server.py StatusRequestHandler._send_json cross-domain policy

October 16, 2026 Yanac

A vulnerability was found in loopx-project LoopX up to 0.4.4. It has been classified as problematic. This affects the function StatusRequestHandler._send_json of the file loopx/status_server.py of the component Status Server. The manipulation leads to permissive cross-domain policy with untrusted domains.

This vulnerability is uniquely identified as CVE-2026-108372. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More