CVE-2026-82594: Improper Authorization in LogNet grpc-spring-boot-starter

This vulnerability in LogNet grpc-spring-boot-starter up to version 5.2.0 involves improper authorization in an unknown function within the Annotation Processing component. It allows remote attackers to manipulate authorization controls. The attack requires high complexity and is difficult to exploit. Although the issue has been publicly disclosed, the vendor has not yet provided a fix or official remediation guidance.

The vulnerability could allow remote attackers with low privileges to bypass authorization controls, potentially leading to unauthorized actions within the affected component. However, the low CVSS score and high attack complexity indicate limited impact and difficulty in exploitation.

No official fix or patch is currently available from the vendor. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, users should consider risk acceptance or implement compensating controls specific to authorization enforcement in their environment.