CyberRota Analysis
AI-GeneratedAnubis Web AI Firewall Utility versions 1.22.0 to 1.26.0-pre1 are vulnerable due to improper validation of the client-controlled X-Original-URI header, which allows attackers to bypass security challenges and access protected resources. This could lead to unauthorized access and exploitation of upstream resources by scraper bots. Organizations using affected versions should prioritize upgrading to version 1.26.0-pre1 or later to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Anubis is a Web AI Firewall Utility that challenges users' connections in order to protect upstream resources from scraper bots. From 1.22.0 until 1.26.0-pre1, lib/policy/checker.go PathChecker.Check() trusted the client-controlled X-Original-URI header before matching r.URL.Path, allowing an HTTP client to match default data/common/keep-internet-working.yaml ALLOW rules such as ^/\.well-known/.*$ and bypass the Anubis challenge. This issue is fixed in version 1.26.0-pre1.