Joro's default proxy mode (in versions <= 1.1.0) exposes a local API on "127.0.0.1:9090" that performs no authentication and applies a wildcard CORS policy. Because plugin uploads use the CORS-safelisted "multipart/form-data" content type, cross-origin JavaScript on any page the operator visits can reach privileged endpoints - including uploading a native plugin and triggering a restart - directly through the operator's browser, with no preflight or credentials. Since plugins execute on load, this yields unauthenticated remote code execution as the operator's user from a single page visit. ***