Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.1, an authenticated user can edit their own inactive subscription and set replacement_subscription_id to a subscription ID belonging to another user. The write is accepted, and later the stats logic dereferences that foreign subscription ID without user_id scoping. This lets the attacker infer the victim subscription's monthly-normalized cost by observing changes in their own stats output. This does not expose the full victim subscription object, but it does expose derived financial metadata. This issue has been patched in version 4.9.1.
Goploy versions 1.17.5 and earlier contain an authorization bypass vulnerability where certain API handlers accept project or project-file IDs from user input without verifying ownership. This allows users with manager or equivalent permissions in their namespace to access and modify files in any project across the installation. The flaw enables unauthorized reading, writing, deletion of files, and modification of a project's git remote URL, which can lead to remote code execution on the next deployment. No patches are publicly available at this time.
MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.30, MCPHub scopes non-admin users to servers they own (list views and config edits enforce ownership), but the tool-execution API does not. Any authenticated non-admin user can invoke tools on MCP servers owned by other users — servers they cannot even see in GET /api/servers. Because connected MCP servers carry real capability (filesystem, HTTP fetch, cloud APIs with the owner's keys), this is cross-tenant compromise: demonstrated arbitrary host file read (/etc/passwd, another user's secrets) and SSRF. This issue has been patched in version 1.0.30.
Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate < 2.2.10 - `Blog::remove_image()` checked whether the user was authorized to edit the article ID passed in the request, but did not verify whether the specified image path (src) belonged to that article. On Joomla 3 builds where physical file deletion was triggered, an author could supply their own article ID alongside an arbitrary file path under the `/images/` directory to delete arbitrary files.
CVE-2026-82725 is an authorization bypass vulnerability in ash-project's ash_phoenix component. It allows an attacker controlling filter form parameters to access private related data by filtering across relationships marked non-public. The vulnerability arises because the filtering logic resolves user-supplied relationship paths without enforcing public-only checks on intermediate relationships, only on the terminal field. This issue affects versions from 0.6.0-rc.1 up to but not including 2.3.25.
CVE-2026-81853 is an authorization bypass vulnerability in ash-project's ash_admin component. It arises from improper validation of user-controlled keys in the decode_primary_key/2 function, allowing attackers to manipulate record lookup filters with arbitrary attributes. This can enable brute-force guessing of sensitive attribute values such as API tokens. The vulnerability affects versions from 0.1.0 up to but not including 1.3.1. The issue has a low CVSS score of 2.3 and no known exploits in the wild.
Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_ai allows a caller of an identity-configured tool to update or destroy records it never identified, including every row in the table.
In AshAi.Tool.Execution, identity_filter/3 built the update/destroy filter directly from the raw tool arguments as [{key, Map.get(arguments, to_string(key))}] and passed it to Ash.Query.do_filter/2. A map value is parsed as a predicate expression rather than a literal, so a caller can send {"public_ref": {"not_eq": "<own-ref>"}} and, combined with Ash.Query.limit(1) and Ash.bulk_update!/Ash.bulk_destroy!, retarget the write at a record it never identified; an omitted key yields an IS NULL filter that matches an arbitrary row. The fix casts each identity value to the field type, rejecting non-scalar inputs.
This issue affects ash_ai: from 0.6.0 before 1.0.0.
A vulnerability in the MasterStudy LMS WordPress Plugin before version 3.7.42 allows users with the instructor role to access other users' order billing details by enumerating order IDs. This issue results from improper access control, enabling unauthorized reading of sensitive information such as names, email addresses, phone numbers, and postal addresses.
The Stripe Payment Forms by WP Full Pay WordPress plugin before version 8.5.5 contains an authorization bypass vulnerability. It does not verify that a subscription belongs to the customer associated with the current customer-portal session before allowing cancellation. This flaw allows an authenticated user with a confirmed portal session to cancel subscriptions belonging to other customers if they know the subscription identifier. The subscription identifier is high-entropy and not enumerable through the plugin, limiting exploitation. The vulnerability has a CVSS score of 4.3, indicating medium severity.
CVE-2026-55867 is a medium severity authorization bypass vulnerability in Graylog2's graylog2-server affecting versions from 6.2.0 until fixed in 6.3.12, 7.0.7, and 7.1.2. It allows an authenticated user to delete access tokens belonging to other users, including service accounts or administrators, by exploiting improper permission checks on the DELETE /users/{userId}/tokens/{idOrToken} endpoint. The vulnerability does not expose token contents but can disrupt access-token-based integrations by unauthorized token deletion.
IBM Langflow OSS versions 1.0.0 through 1.11.1 contain an authorization bypass vulnerability (CWE-639) that allows a remote authenticated attacker to execute and read any user's private flow. This occurs due to improper authorization checks related to user-controlled keys. The vulnerability has a CVSS 3.1 base score of 6.4, indicating a medium severity impact.
IBM Langflow OSS versions 1.0.0 through 1.11.1 contain an authorization bypass vulnerability due to a namespace collision between user identifiers. This flaw could allow a remote attacker to access sensitive information and inject unauthorized messages. The vulnerability is identified as CWE-639 and has a high severity with a CVSS score of 8.2.
A vulnerability in Vikunja prior to version 2.4.0 allows an authenticated user to bypass authorization controls when relocating buckets between Kanban views. The issue arises because the permission check validates the current bucket's project and view but does not validate the destination view specified in the request body. This enables an attacker to move their own bucket into another tenant's Kanban view, retaining control and content ownership, which can lead to cross-tenant defacement. The vulnerability is fixed in version 2.4.0.
CVE-2026-55066 is an authorization bypass vulnerability in the open-source task management platform Vikunja. Versions prior to 2.4.0 allow authenticated users to manipulate tasks across tenants by exploiting insufficient authorization checks on task identifiers supplied in API requests. This enables enumeration and modification of task completion status without proper permission verification. The issue is fixed in version 2.4.0.
A vulnerability in Vikunja versions from 0.24.6 up to but not including 2.4.0 allows an authenticated user to delete Kanban assignments and ordering across projects due to improper authorization checks in the DELETE /api/v1/projects/:project/views/:view endpoint. The flaw arises because the authorization logic does not verify that the view belongs to the specified project, enabling cross-tenant destructive actions on task buckets and positions. This issue is fixed in version 2.4.0.
Hatchet versions from 0.40.0 up to but not including 0.91.1 have an authorization bypass vulnerability in the Dispatcher gRPC service. This flaw allows an authenticated tenant owner who guesses another tenant's worker UUID to overwrite that worker's affinity labels or disconnect the worker, causing cross-tenant integrity issues and denial of service in multi-tenant deployments. Single-tenant deployments are not practically affected. The issue is fixed in version 0.91.1.
CVE-2026-81299 is a medium severity vulnerability in Ahmad WP Job Portal versions up to 2.5.9. It involves an Insecure Direct Object Reference (IDOR) that allows authorization bypass through a user-controlled key, classified under CWE-639. This flaw could allow an attacker with limited privileges to perform unauthorized actions or access data by manipulating keys. No official patch or remediation guidance is currently available from the vendor.
A vulnerability in the User Registration & Membership WordPress plugin before version 5.2.5 allows authenticated users with Subscriber-level access and above to cancel any other user's pending email change without verifying ownership of the account. This authorization bypass issue can affect users including administrators.
A vulnerability in the Quiz and Survey Master (QSM) WordPress plugin before version 11.2.4 allows users with Contributor role or higher to access question bank entries via a REST API route without proper authorization checks. This exposure includes quiz questions, hints, and correct answer keys belonging to other users.