Vulnerability · Published Apr 13, 2026 · Assigned by VulDB

CVE-2026-6143farion1231 cc-switch ProxyServer server.rs cross-domain policy

Medium 6.3

In plain English

A medium-severity security flaw in cc-switch from farion1231. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).

Severity (CVSS 3.1)6.3Medium

Exploit odds (30 days)0.2%top 91.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A security flaw has been discovered in farion1231 cc-switch up to 3.12.3. Affected by this issue is some unknown functionality of the file src-tauri/src/proxy/server.rs of the component ProxyServer. The manipulation results in permissive cross-domain policy with untrusted domains. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.

Affected products (as reported)

Vendor	Product	Versions
farion1231	cc-switch	3.12.03.12.13.12.23.12.3

Weakness: CWE-942, CWE-346 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

References

VDB-357007 | farion1231 cc-switch ProxyServer server.rs cross-domain policy vdb-entry
VDB-357007 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
Submit #796145 | github.com/farion1231 cc-switch v3.12.3 Origin Validation Error third-party-advisory
https://github.com/farion1231/cc-switch/issues/1841 issue-tracking
https://github.com/farion1231/cc-switch/pull/1915 issue-tracking, patch
https://github.com/farion1231/cc-switch/issues/1841#issue-4191294952 exploit, issue-tracking
https://github.com/farion1231/cc-switch/ product