tidewave-ai

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

tidewave-ai records in CISA KEV

No tidewave-ai vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-81370 CVE-2026-109823 · GHSA-cw46-9gf7-56p5

Host filesystem path disclosure in Tidewave via DNS rebinding

LOW 12

An attacker can read the name of filesystem paths of your application present via Tidewave configuration via /tidewave/connect or via the rendered toolbar.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00368 Published 2026-10-27 Fixed in 0.9.2 CWE-497

Open these records in search →

Critical	0
High	0
Medium	0
Low	1
No CVSS	0