CVE-2025-59956 - CVE House
Back to Database
Status published Medium CVE-2025-59956

AgentAPI exposed user chat history via a DNS rebinding attack

Vulnerability Description

AgentAPI is an HTTP API for Claude Code, Goose, Aider, Gemini, Amp, and Codex. Versions 0.3.3 and below are susceptible to a client-side DNS rebinding attack when hosted over plain HTTP on localhost. An attacker can gain access to the /messages endpoint served by the Agent API. This allows for the unauthorized exfiltration of sensitive user data, specifically local message history, which can include secret keys, file system contents, and intellectual property the user was working on locally. This issue is fixed in version 0.4.0.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-59956

Credits & Attribution

No credits recorded in the NVD database.

References

More from coder

View All →
CVE-2025-66411
Coder logged sensitive objects unsanitized
High 7.8
CVE-2025-58437
Coder's privilege escalation vulnerability could lead to a cross workspace compromise
High 8.1
CVE-2025-47269
code-server session cookie can be extracted by having user visit specially crafted proxy URL
High 8.3
CVE-2024-27918
Coder's OIDC authentication allows email with partially matching domain to register
High 8.2
CVE-2021-42648
Cross-site scripting (XSS) vulnerability exists in Coder Code-Server before 3.12.0,...
Medium 6.1

Affected Vendor

Affected Software

agentapi
Vulnerable Versions:
< 0.4.0

Timeline

Official Publish: September 29th, 2025
Last Modified: September 30th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-350

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.