OpenYak’s desktop backend exposes a local HTTP API without server‑side origin checks, loopback authentication, content‑type enforcement, or proper CORS restrictions. The API allows any web page displayed in the user’s browser to send cross‑origin requests to 127.0.0.1, effectively letting the browser act as a relay to the local server. According to the advisory, a malicious page can chain this capability to run arbitrary shell commands on the host through the build agent’s bash execution, shut down the service, and exfiltrate chat logs and personal data. This flaw thus provides an attacker with remote code execution privileges and full compromise of the host system, impacting confidentiality, integrity, and availability.

Customers using the openyak product before version 1.1.3 are vulnerable. The flaw exists in the desktop backend component that listens on a random localhost port, typically 19141. Any user running a pre‑1.1.3 instance while browsing the Internet could be affected, regardless of the OS or other security controls.

The advisory assigns a CVSS score of 9.6, indicating critical severity. The EPSS is not provided, and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires that a user visit a malicious web page while the vulnerable OpenYak instance is running; no direct network access is needed, and no user interaction beyond loading the page is required. Attackers can leverage the lack of origin validation to issue authenticated requests to the local API and trigger arbitrary command execution.