CVE-2026-111655: Authorization Bypass Through User-Controlled Key in zoujingli think-plugs-admin

The vulnerability in think-plugs-admin through version 1.0.81 arises from insufficient authorization checks on the admin/file.edit endpoint. Attackers with the admin/file.edit node permission can supply a target id and specify columns such as xurl, hash, or uuid to access or modify file records belonging to other administrators. This insecure direct object reference flaw enables unauthorized reading and overwriting of sensitive file metadata.

An attacker with admin/file.edit privileges but not super administrator rights can exploit this vulnerability to access and alter file records of other administrators. This could compromise confidentiality and integrity of administrative file data, including download URLs and ownership information. However, the attack requires some level of privilege (admin/file.edit node), limiting exposure to users with elevated but not full administrative rights.

No vendor advisory or patch information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict admin/file.edit permissions to fully trusted users only to reduce risk of exploitation.