An unauthenticated privilege escalation vulnerability in exo-explore exo version 1.0.69 permits remote attackers to cause a denial of service via the GET /state and DELETE /instance/{instance_id} endpoints.

This issue is an unauthenticated privilege escalation vulnerability that allows a remote attacker to target the GET /state and DELETE /instance/{instance_id} endpoints with no authentication required.

A successful exploit of this vulnerability could lead to significant system downtime or service disruption, as indicated by the high impact on availability. With a CVSS score of 7.5, the risk level is high, primarily because an unauthenticated network attacker can trigger service interruptions without requiring user interaction or prior access.

Immediate Action: Review the vendor advisory and apply the latest available updates or patches for exo as soon as they are released.

Proactive Monitoring: Monitor API access logs for anomalous requests targeting the GET /state and DELETE /instance/{instance_id} endpoints.

Compensating Controls: Implement Web Application Firewall (WAF) rules to block suspicious unauthenticated requests targeting instance deletion and state retrieval endpoints.

Public Exploit Available: Yes, a published proof-of-concept exists via the referenced GitHub advisory link.

Organizations utilizing exo version 1.0.69 should treat this high-severity vulnerability with urgency. Immediate application of vendor-supplied patches, combined with network-level access controls for administrative endpoints, is vital to mitigate the risk of service disruption.