| Reporter | Title | Published | Views | Family All 15 |
|---|---|---|---|---|
 | CVE-2026-55884 | 10 Jul 202621:36 | – | attackerkb |
 | CVE-2026-55884 | 10 Jul 202622:16 | – | circl |
 | CVE-2026-55884 Tilt: Missing authentication on the network-exposed Tilt HUD server | 10 Jul 202621:36 | – | cvelist |
 | EUVD-2026-43110 | 10 Jul 202621:36 | – | euvd |
 | Tilt: Missing authentication on the network-exposed Tilt HUD server | 19 Jun 202613:58 | – | github |
 | CVE-2026-55884 | 10 Jul 202622:16 | – | nvd |
 | GHSA-C73Q-8XXR-RGQM Tilt: Missing authentication on the network-exposed Tilt HUD server | 19 Jun 202613:58 | – | osv |
| GO-2026-5317 Tilt: Missing authentication on the network-exposed Tilt HUD server in github.com/tilt-dev/tilt | 25 Jun 202618:43 | – | osv |
| OPENSUSE-SU-2026:21483-1 Security update for govulncheck-vulndb | 30 Jul 202609:09 | – | osv |
 | PT-2026-50980 | 19 Jun 202600:00 | – | ptsecurity |
10
[
{
"vendor": "tilt-dev",
"product": "tilt",
"versions": [
{
"version": ">= 0.20.8, < 0.37.4",
"status": "affected"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| session_token | path | /proxy | Unauthenticated access via the Tilt HUD /proxy endpoint when bound to a non-loopback address allows triggering developer-defined resources, tampering with Tiltfile arguments, reading the full engine state including the session token, and proxying to apiserver resources. | CWE-306 |
| Tiltfile_arguments | path | /proxy | Unauthenticated access via the Tilt HUD /proxy endpoint when bound to a non-loopback address allows triggering developer-defined resources, tampering with Tiltfile arguments, reading the full engine state including the session token, and proxying to apiserver resources. | CWE-306 |
| engine_state | path | /proxy | Unauthenticated access via the Tilt HUD /proxy endpoint when bound to a non-loopback address allows triggering developer-defined resources, tampering with Tiltfile arguments, reading the full engine state including the session token, and proxying to apiserver resources. | CWE-306 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
29 Jul 2026 20:17Current
6.2Medium risk
Vulners AI Score6.2
CVSS 49.2
EPSS0.00496
SSVC