Your local LLM server is reachable by any web page: CSRF/DNS rebinding risk tested live
FeydRowan · reddit · 2026-11-08
A developer demonstrates live that local inference/MCP servers on localhost with default configs can be driven by any web page via classic CSRF/DNS rebinding — binding to 127.0.0.1 doesn't help since the browser runs on the same machine. Several popular local inference servers are susceptible by default; the attack works even via a headless browser. The author patched his own engine (capy-flash) to reject cross-origin and rebinding requests on loopback binds.
More from Infra
- Hugging Face free accounts now get 2 ZeroGPU Spaces with ~5 min GPU/day — Fine_League311 · 2026-11-08
- kmorph: open-source Linux project recovers from kernel crashes without rebooting in ~2s — kingslyj · 2026-11-08
- AI progress per dollar fell 63% as R&D spending grew 5.3x faster than capability gains — kimmonismus · 2026-11-08
- blank: open-source local-first agent harness fixes parallel sub-agent collisions and rate-limit halts — Big_Veterinarian7479 · 2026-11-08
- Google plans $15B Malaysia data centers by 2028; Microsoft carries $80B+ obligations — YvesMulkers · 2026-11-08
- antirez: DwarfStar now runs Kimi K3.1 PRO inference from safetensors via SSD streaming — antirez · 2026-11-08