Incorrect authorization (CWE-863) in Tabularis through 0.27.0 lets prompt-injected agents or untrusted MCP clients bypass read-only mode via side-effecting SELECT statements such as setval, nextval, or query_to_xml with embedded DELETE, modifying data without approval…
Phi 0.3.0 through 0.28.4 lets spawned sub-agents escape workspace_only_writes and readonly mode via an unchecked workdir passed to agent_spawn, letting prompt-injected content drive unapproved file writes anywhere the user can write. Medium severity, CVSS…
OpenLIT 2.1.0 allows authenticated users to read other projects' telemetry, including LLM prompts and completions, by forging the x-openlit-project-id header (CWE-639, CVSS 4.0 score 6.0).
IBM i 7.3–7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper enforcement of the ChrootDirectory configuration directive (CWE-269). CVSS 3.1: 5.4 (Medium); not listed in the CISA KEV catalog…
abp-next-admin 10.2.0 through 10.6.0 contains an IDOR (CWE-639) in the LINGYUN.Abp.AIManagement module: authenticated users with the Chat permission can supply another user's ConversationId GUID to ChatAppService.GetListAsync or SendMessageAsync to read or inject messages in…
Cube-studio through 2026.09.01 lets any authenticated user view or copy other project groups' pipelines by enumerating sequential pipeline ids through the web, log, monitoring, pod, and copy_pipeline endpoints in myapp/views/view_pipeline.py, exposing DAGs, cluster names,…
Piranha CMS through 12.2 fails to enforce the granular Language permissions on the Piranha.Manager LanguageApiController, letting any authenticated manager user list, create, edit and delete site languages via manager/api/language and reassign sites to the…
ClickVisual through 1.1.2 skips per-instance authorization in the /api/v2/reports handlers, letting authenticated low-privileged users iterate the instance-id parameter to enumerate schemas and infer row counts of restricted ClickHouse tables on instances they were never…
AIHelms through 0.1.25 fails to enforce efficiency:read and efficiency:write permission checks in apps/api/v1/efficiency.py, letting authenticated low-privileged users read organization-wide AI spend via /cost/detail, /top-users and /budget and modify suggestion statuses or generate reports (CVSS…
Exrick XBoot through 3.3.4 lets authenticated users bypass role data-scope restrictions by appending openDataFilter=false to department getByParentId or search endpoints, exposing the full department tree and names outside their assigned scope. CVSS 4.3 (Medium),…