Executive brief
farion1231 cc-switch is a desktop management tool for various AI command-line interfaces. A security flaw in its local proxy server allows malicious websites to bypass security restrictions and interact with the tool. This could lead to the unauthorized use or theft of sensitive AI service API keys.
Technical details
A Cross-Origin Resource Sharing (CORS) misconfiguration exists in the ProxyServer component, specifically within 'src-tauri/src/proxy/server.rs'. The local HTTP server (typically listening on 127.0.0.1:15721) was configured with a permissive CORS layer that allowed any domain to issue cross-origin requests. A remote attacker can leverage this by enticing a user to visit a malicious webpage, which then uses the victim's browser to send requests to the local proxy. This can be used to exfiltrate API keys or abuse AI service credits. The issue was addressed in pull request #1915 by removing the permissive CORS layer.
Affected products
- farion1231 cc-switch up to 3.12.3
Timeline
- 2026-04-06: other: Fix proposed in pull request #1915
- 2026-04-13: patched: Fix merged into main branch
- 2026-04-13: advisory: Vulnerability disclosed and CVE assigned