Caido Web Security Auditing Toolkit DNS Rebinding Vulnerability Leading to Remote Code Execution

A vulnerability in Caido, a web security auditing toolkit, prior to version 0.48.0, allows for remote code execution via DNS rebinding attacks. The lack of protection against DNS rebinding enables an attacker-controlled domain to hijack the authentication flow of Caido. This exploitation can occur during the initial setup of Caido or by initiating a new authentication flow on a previously configured instance. In both scenarios, the victim must authorize the request on dashboard.caido.io.

Impact

Exploitation of this vulnerability allows for remote command execution on the affected system where Caido is running.

Remediation

Users are advised to upgrade to Caido version 0.48.0 or later, where this vulnerability has been patched.