CVE-2026-72741: Authorization Bypass Through User-Controlled Key in goodrain rainbond
CVE-2026-72741 is a high-severity broken access control vulnerability in goodrain rainbond versions up to and including 6.9.7. It allows authenticated attackers to bypass enterprise ID verification by substituting another enterprise's tenant name in URL paths, enabling unauthorized access to enterprise resources such as services, plugins, environment variables, and certificates.
AI Analysis
Technical Summary
The vulnerability exists in the CheckToken function of goodrain rainbond through version 6.9.7. Authenticated attackers can use any valid API token and manipulate the tenant name in URL paths to bypass access controls. This broken access control flaw allows attackers to access or modify resources belonging to other enterprises, including services, plugins, environment variables, and certificates, without proper authorization.
Potential Impact
Attackers with valid API tokens can gain unauthorized access to and modify sensitive enterprise resources across different tenants. This compromises confidentiality and integrity of enterprise data and services, potentially leading to data leakage, service disruption, or unauthorized configuration changes.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict API token distribution and monitor for unusual access patterns involving tenant name substitution in URLs.
CVE-2026-72741: Authorization Bypass Through User-Controlled Key in goodrain rainbond
Description
CVE-2026-72741 is a high-severity broken access control vulnerability in goodrain rainbond versions up to and including 6.9.7. It allows authenticated attackers to bypass enterprise ID verification by substituting another enterprise's tenant name in URL paths, enabling unauthorized access to enterprise resources such as services, plugins, environment variables, and certificates.
CVSS v4.0
Score 8.6high
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability exists in the CheckToken function of goodrain rainbond through version 6.9.7. Authenticated attackers can use any valid API token and manipulate the tenant name in URL paths to bypass access controls. This broken access control flaw allows attackers to access or modify resources belonging to other enterprises, including services, plugins, environment variables, and certificates, without proper authorization.
Potential Impact
Attackers with valid API tokens can gain unauthorized access to and modify sensitive enterprise resources across different tenants. This compromises confidentiality and integrity of enterprise data and services, potentially leading to data leakage, service disruption, or unauthorized configuration changes.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict API token distribution and monitor for unusual access patterns involving tenant name substitution in URLs.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-08-10T13:53:42.482Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a7e08efbf8831d5399b7993
Added to database: 08/13/2026, 18:11:59 UTC
Last enriched: 08/13/2026, 18:26:47 UTC
Last updated: 08/14/2026, 00:08:50 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.