CVE-2026-108372

Open and provider-neutral, LoopX is a lightweight state kernel and local-first control plane for loop engineering. From version 0.0.1 until 0.4.5, loopx serve-status in loopx/statusserver.py uses StatusRequestHandler.sendjson and doOPTIONS to send Access-Control-Allow-Origin: for unauthenticated...

CVE-2026-108372: Origin Validation Error

Open and provider-neutral, LoopX is a lightweight state kernel and local-first control plane for loop engineering. From version 0.0.1 until 0.4.5, loopx serve-status in loopx/statusserver.py uses StatusRequestHandler.sendjson and doOPTIONS to send Access-Control-Allow-Origin: for unauthenticated...

PT-2026-116165

Name of the Vulnerable Software and Affected Versions LoopX versions 0.0.1 through 0.4.4 Description The loopx serve-status command in loopx/status server.py uses StatusRequestHandler. send json and do OPTIONS to send an Access-Control-Allow-Origin: header for unauthenticated responses on...