CVE-2026-49455 | wakujs Waku up to 1.0.0-beta.0 RSC Request Dispatcher cross-domain policy

September 3, 2026 Yanac

A vulnerability labeled as problematic has been found in wakujs Waku up to 1.0.0-beta.0. The impacted element is an unknown function of the component RSC Request Dispatcher. Executing a manipulation can lead to permissive cross-domain policy with untrusted domains.

This vulnerability appears as CVE-2026-49455. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More