CVE-2023-7080

CVE-2023-7080 is a high-severity vulnerability affecting Cloudflare Wrangler, specifically versions prior to 3.19.0 and 2.20.2. It allowed attackers on the local network to achieve arbitrary code execution within the Workers sandbox due to the V8 inspector listening on all network interfaces and lacking Origin/Host header validation. This could lead to compromise of local systems or, if --remote was used, production resources. The vulnerability has a CVSS score of 8.0 (HIGH), indicating a network-adjacent attack vector with low attack complexity, requiring user interaction (e.g., tricking a user into visiting a malicious website). The potential impact includes high confidentiality, integrity, and availability compromise. Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, which is typical for the vast majority of vulnerabilities.