CWE-285: Improper Authorization vulnerabilities

PraisonAI versions from 0.1.4 up to but not including 0.1.5 contain an improper authorization vulnerability allowing any workspace member to permanently delete any resource within the workspace, including those created by the owner or other members. This affects projects, agents, issues, labels, issue dependencies, and issue-label attachments. The flaw arises because DELETE endpoints check only for workspace membership without verifying ownership or user roles. This vulnerability has been fixed in version 0.1.5.

CVE-2026-84748 is a high-severity improper authorization vulnerability in Apache bRPC versions prior to 1.18.0. It allows remote attackers to access builtin services through the public port due to missing enforcement of security_mode in protobuf-based protocol dispatch paths. This can lead to disclosure of sensitive runtime information such as metrics, flags, and profiler data that should only be accessible via the internal port. The issue affects configurations where the internal_port is set to restrict builtin services but the public port remains reachable from untrusted networks with protobuf-based protocols enabled. A fix is available in version 1.18.0.

IBM DataStage on Cloud Pak for Data version 5.4.0.0 contains an improper authorization vulnerability that allows unauthenticated users to write arbitrarily into a shared Redis cache under any tenant's key. This flaw breaks the platform's credential-encryption boundary, enabling anonymous attackers to poison cached flow parameters for any tenant.

MISP versions prior to 2.5.48 contain a vulnerability in the server settings lookup mechanism that allows authenticated users to retrieve sensitive configuration data that should have been redacted. This occurs because branch nodes in the configuration tree do not carry redaction flags, enabling full branch contents—including security salts, Redis passwords, and plugin API keys—to be exposed. The vulnerability affects endpoints that retrieve and edit server settings, leading to unauthorized disclosure of sensitive server secrets.

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag.

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper validation of attacker-supplied transaction identifiers.

CVE-2026-86009 is an improper authorization vulnerability in Mailu mail server prior to commit f05aeb8322e2f61096af6b089d61ba6f40587d96. It allows domain managers to enable spoofing for domains they do not control, enabling them to send emails authenticated with DKIM/SPF for unauthorized domains. This flaw is fixed in the specified commit.

NL Portal Backend Libraries versions prior to 3.0.3 contain an improper authorization vulnerability. Authenticated users can access documents belonging to others via the getDocumentContent GraphQL query and a REST API endpoint without verifying ownership or authorization. Document identifiers are random but may leak, allowing unauthorized reading of potentially sensitive personal information. This issue is resolved in version 3.0.3.

Lychee is a free, open-source photo-management tool. Prior to 7.6.3, GET /api/v2/Zip authorizes album and photo archives through AlbumPolicy::canDownload() and PhotoPolicy::canDownload() without first enforcing AlbumPolicy::canAccess(). For a public, password-protected album with grants_download enabled, an unauthenticated attacker who knows the shared album identifier can download a ZIP archive without supplying the password or unlocking the album, even though browsing endpoints deny access. The archive exposes the album's photos and can include full-resolution originals and associated metadata when grants_full_photo_access is enabled. This issue is fixed in version 7.6.3.

CVE-2026-70218 is a high-severity vulnerability in Microsoft Windows 11 Version 24H2 involving insufficient granularity of access control in the Windows StateRepository API. This flaw allows an authorized local attacker to elevate privileges. The issue affects specific builds of Windows 11 Version 24H2 prior to certain fixed versions. Microsoft has released official patches to address this vulnerability.

IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applications belonging to other users due to improper functional level access control.

CVE-2026-84314 is an improper authorization vulnerability in 0xJacky's nginx-ui that allows any authenticated user to change any other user's password without requiring two-factor authentication (2FA). The vulnerable endpoint POST /api/users/:id lacks the RequireSecureSession middleware, unlike other sensitive operations that enforce 2FA. This flaw enables an attacker to take over the initial admin account by changing its password, effectively locking out the legitimate admin user.

CVE-2026-21136 is an improper authorization vulnerability in Samsung Mobile Smart Switch prior to version 3.7.73. This flaw allows physical attackers to invoke the application restore process without proper authorization. The vulnerability has a medium severity with a CVSS 4.0 base score of 6.8. No known exploits are reported in the wild. No specific affected versions were explicitly stated beyond being prior to 3.7.73.

CVE-2026-11930 is an authorization vulnerability in IBM Security Verify Access and IBM Verify Identity Access. Versions 10.0 through 10.0.9.2 and 11.0 through 11.0.3 may not correctly enforce authorization for some web servers, potentially allowing unauthorized actions. The vulnerability has a medium severity rating and a CVSS score of 5.9.

CVE-2026-16181 is an improper authorization vulnerability in IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.0.0 through 10.6.0.10, 10.6.1 through 10.6.6, and 11.0.0.0 through 11.0.0.2. This flaw could allow a remote attacker to bypass security restrictions without authentication. The vulnerability has a high severity rating with a CVSS score of 7.4, indicating a significant impact on confidentiality and integrity. No known exploits are reported in the wild, and no vendor advisory or patch information is provided in the input data.

Plane, an open-source project management tool, has a privilege management vulnerability prior to version 1.4.0. A Project Member with role 15 can exploit insufficient validation in the project-member update API endpoint to promote a Project Guest (role 5) to Member without requiring Project Admin approval. This unauthorized role escalation grants additional project capabilities and bypasses governance controls. The issue is fixed in version 1.4.0.

A vulnerability in Bouncy Castle for Java versions 1.81 up to but not including 1.86 allows incorrect authorization in the OpenPGP certificate API. The API accepted third-party certifications or trust delegations from subkeys that lacked the required CERTIFY_OTHER key flag, enabling an attacker to escalate a restricted subkey's authority to that of the primary key's identity-issuing capability. This flaw could cause applications relying on the API's validation to mistakenly trust attacker-controlled identities. The issue is fixed in version 1.86.

An Editor can set file-provisioning metadata (the grafana.app/managedBy, grafana.app/managerId and grafana.app/sourcePath annotations) when creating a dashboard through the dashboard API, because these fields were stored without an authorization check. The dashboard then appears file-provisioned, and administrators can no longer update or delete it through Grafana. The impact is limited to the same organization and no data is exposed.

An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access only to the Access Portal to obtain unauthorized Mobile VPN with SSL access through a specially crafted request.