Unauthenticated confused deputy flaw found in @eeacms/volto-chatbot

@eeacms/volto-chatbot up to 2.0.3 has a confused deputy vulnerability (CWE-862, CVSS 8.2): wildcard proxy routes /_v1_da/** and /_v1_ha/** attach server-side API keys without checking client auth. Unauthenticated attackers can invoke arbitrary admin endpoints on Danswer (Onyx) and Halloumi (LLMGW) backends. Fixed in 2.0.4 with path allowlists.

• CVSS 8.2, CWE-862; versions 2.0.3 and earlier affected
• Proxy auto-attaches DANSWER_API_KEY and LLMGW_TOKEN to requests
• Public PoC available; fix in 2.0.4 adds path allowlists
• Rotate keys and audit logs for /api/admin/* access