CVE-2026-111695: Authorization Bypass Through User-Controlled Key in shaiwz data-platform-open

The vulnerability in shaiwz data-platform-open arises from insecure direct object references (IDOR) where authenticated users can supply foreign numeric IDs to endpoints such as /datasource/detail, /listSchemaTable, /tableDetail, /update, or /delete. This flaw permits unauthorized access to other workspaces' datasources, enabling attackers to obtain sensitive JDBC credentials, enumerate database schemas, and perform unauthorized modifications or deletions of datasource configurations. The issue is present in version 0 of the product. The CVSS 4.0 base score is 7.1, indicating a high severity with network attack vector, low attack complexity, no user interaction, and partial impact on confidentiality and integrity.

An attacker with authenticated access to a workspace can bypass authorization controls to access and manipulate datasources belonging to other workspaces. This includes obtaining sensitive JDBC credentials, enumerating database schemas, and modifying or deleting datasource configurations. This can lead to unauthorized data exposure and potential disruption of database connectivity for affected workspaces.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict authenticated user permissions to minimize exposure and monitor for suspicious access patterns related to datasource IDs.