Executive brief
Parse Dashboard is a web-based management interface for Parse Server backends. The AI Agent API endpoint lacks CSRF (Cross-Site Request Forgery) protection, allowing an attacker to craft a malicious webpage that tricks an authenticated dashboard user into submitting unintended requests. This could enable unauthorized actions within the dashboard when a logged-in user visits a compromised website.
Technical details
This is a Cross-Site Request Forgery (CWE-352) vulnerability in the AI Agent API endpoint of Parse Dashboard. The vulnerable component is the POST /apps/:appId/agent endpoint, which processes requests from authenticated users without verifying CSRF tokens. The attack requires network access to Parse Dashboard and user interaction (an authenticated user must visit a malicious page), but no special privileges are needed. An attacker can leverage the victim's authenticated session to submit arbitrary requests to the agent endpoint, potentially modifying application state or triggering unintended agent operations. The fix, available in version 9.0.0-alpha.8 and later, adds CSRF middleware to the agent endpoint and embeds CSRF tokens in the dashboard page.
Affected products
- Parse Community Parse Dashboard >=7.3.0-alpha.42, <9.0.0-alpha.8
Timeline
- 2026-02-25: disclosed: Advisory GHSA-3534-xp88-25rc published
- 2026-02-19: patched: Fixed in version 9.0.0-alpha.8