diff --git a/kernel/server/serve.go b/kernel/server/serve.go
index 8bd5ae71c..382f16a0e 100644
--- a/kernel/server/serve.go
+++ b/kernel/server/serve.go
@@ -474,6 +474,7 @@ func corsMiddleware() gin.HandlerFunc {
 		c.Header("Access-Control-Allow-Credentials", "true")
 		c.Header("Access-Control-Allow-Headers", "origin, Content-Length, Content-Type, Authorization")
 		c.Header("Access-Control-Allow-Methods", "GET, POST, PUT, PATCH, DELETE, HEAD, OPTIONS")
+		c.Header("Access-Control-Allow-Private-Network", "true")
 
 		if c.Request.Method == "OPTIONS" {
 			c.AbortWithStatus(204)