Read the docs

janhq

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

janhq records in CISA KEV

No janhq vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-47003 CVE-2026-66005 · GHSA-4r96-7xrx-4gcr

Jan Local API Server CORS Origin Reflection via 0.0.0.0 Binding

Priority MEDIUM 57

Jan through 0.8.4, fixed in commit 3e1c1e7, contains a CORS misconfiguration vulnerability in its local API server that allows network-adjacent attackers to bypass trusted host restrictions by exploiting the server's rep…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00331 Published 2026-07-24 Fixed CWE-183
TI-2026-85208 CVE-2026-122235 · GHSA-pjpc-p955-xv4f

Workspace guard bypass in Jan lets attackers write files outside workspace

Priority LOW 25

Jan from 0.8.5 before 0.8.8 contains a workspace guard bypass vulnerability in the agent-tools gate.rs that allows attackers to write files outside the workspace via dangling symlinks.

CVSS 4.0MEDIUM 5.7 Local No auth User interaction EPSS 0.0017 Published 2026-11-04 Fixed in 0.8.8 CWE-59
Open these records in search →