{"cve":"CVE-2025-59956","nvd":{"published":"2025-09-30T11:37:41.743","modified":"2026-06-17T09:46:55.230","status":"Analyzed","description":"AgentAPI is an HTTP API for Claude Code, Goose, Aider, Gemini, Amp, and Codex. Versions 0.3.3 and below are susceptible to a client-side DNS rebinding attack when hosted over plain HTTP on localhost. An attacker can gain access to the /messages endpoint served by the Agent API. This allows for the unauthorized exfiltration of sensitive user data, specifically local message history, which can include secret keys, file system contents, and intellectual property the user was working on locally. This issue is fixed in version 0.4.0.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","score":6.5},"cwes":["CWE-290","CWE-350"],"references":["https://github.blog/security/application-security/localhost-dangers-cors-and-dns-rebinding","https://github.com/coder/agentapi/commit/5c425c62447b8a9eac19e9fc5a2eae7f0803f149","https://github.com/coder/agentapi/pull/49","https://github.com/coder/agentapi/releases/tag/v0.4.0","https://github.com/coder/agentapi/security/advisories/GHSA-w64r-2g3w-w8w4"],"products":["coder:agentapi"],"source":"nvd","synced_at":"2026-10-19T22:11:26.888974865+00:00"},"epss":{"cve":"CVE-2025-59956","score":0.00426,"percentile":0.36863,"date":"2026-10-31"},"kev":null,"osv":[{"id":"GHSA-w64r-2g3w-w8w4","url":"https://osv.dev/vulnerability/GHSA-w64r-2g3w-w8w4","summary":"Coder AgentAPI exposed user chat history via a DNS rebinding attack","modified":"2025-10-23T20:33:23Z","packages":[{"ecosystem":"Go","name":"github.com/coder/agentapi","purl":"pkg:golang/github.com/coder/agentapi","ranges":["<0.4.0"],"fixed":["0.4.0"]}]},{"id":"GO-2025-3991","url":"https://osv.dev/vulnerability/GO-2025-3991","summary":"Coder AgentAPI exposed user chat history via a DNS rebinding attack in github.com/coder/agentapi","modified":"2026-03-03T04:56:56.894996Z","packages":[{"ecosystem":"Go","name":"github.com/coder/agentapi","purl":"pkg:golang/github.com/coder/agentapi","ranges":["<0.4.0"],"fixed":["0.4.0"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}