Executive brief
Lunary is an open-source AI platform with backend and frontend components. A CSRF vulnerability in overly permissive CORS settings could allow attackers to hijack locally-hosted instances and sign up for projects or access the system as an authorized user. This primarily affects instances running on personal machines without internet exposure, but compromises local security and user intent.
Technical details
A Cross-Site Request Forgery (CWE-352) vulnerability exists in Lunary versions prior to 1.4.10 due to overly permissive CORS settings that allow all origins. Unauthenticated endpoints are exposed to CSRF attacks, allowing an attacker to perform state-changing actions (account signup, project creation) without user consent. The attack requires user interaction (the user must visit an attacker-controlled page while logged into Lunary) and is particularly effective against locally-hosted instances. The vulnerability has been fixed in version 1.4.10 by restricting CORS policies. The advisory was withdrawn because it targeted the wrong repository, though the underlying vulnerability in the npm packages remains valid.
Affected products
- Lunary lunary before 1.4.10
- Lunary @lunary/backend before 1.4.10
Timeline
- 2024-09-13: disclosed
- 2025-06-20: other: Advisory withdrawn