CVE-2026-8828 is a high-severity vulnerability in ChromaDB Rust project version 1.0.0 that allows any authenticated user to bypass authorization controls. This flaw enables users to read, write, update, or delete data in any tenant's collection regardless of their tenant membership. The vulnerability arises from a lack of authorization validation related to user-controlled keys.
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to.
ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #133, a normal authenticated user can edit another user's video subtitles because of a lack of authorization. They can upload subtitles, edit their name or delete them. This issue has been patched in version 5.5.3 - #133.
Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.5, the AutoMod remove flow looks up and deletes rules by global database ID without verifying that the rule belongs to the guild where the command is executed. A user can learn a victim guild’s AutoMod rule ID through autocomplete, then remove that rule from another guild where they have Manage Server. This issue has been patched in version 1.0.5.
IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify sensitive information by bypassing authentication using insecure direct object references.
openSIS Classic 9.3 contains an insecure direct object reference vulnerability in the messaging module. Any authenticated user with access to the messaging module can request sent-message details from modules/messaging/SentMail.php by supplying an arbitrary mail_id value.
Sharp is a content management framework built for Laravel as a package. Prior to version 9.22.0, Sharp exposes a generic download endpoint that authorizes access only to the supplied Sharp entity instance, but then reads the target storage disk and path from request parameters. Because the requested storage object is not bound to the authorized entity instance, an authenticated Sharp user who can view one valid record may use that record as an authorization anchor to download unrelated disk-relative objects from configured Laravel Storage disks. The confirmed impact is authenticated disclosure of unrelated objects from configured Laravel Storage disks. This issue does not imply arbitrary host filesystem access outside configured Laravel Storage disk roots. This issue has been patched in version 9.22.0.
Plane, an open-source project management tool, has a vulnerability prior to version 1.3.1 that allows authenticated users to bypass authorization controls across workspaces. This flaw enables unauthorized reading, copying, deletion, and overwriting of assets in other Plane workspaces. The issue is identified as a cross-workspace asset authorization bypass and is tracked as CVE-2026-46558. A fix has been released in version 1.3.1 to address this vulnerability.
A flaw exists in the FlashArray Purity management interface where an authenticated low-privileged user may, under specific conditions, access functionality beyond their assigned privileges.
CVE-2026-44083 is an authorization bypass vulnerability in QNAP Systems Inc.'s QuMagie product. The flaw involves a user-controlled key that allows remote attackers to gain unintended privileges without authentication. This vulnerability is addressed in QuMagie version 2.9.1 and later.
The 6Storage Rentals WordPress plugin is vulnerable to an authorization bypass vulnerability in all versions up to 2.22.0. This flaw allows unauthenticated attackers to read and modify arbitrary user profile data by supplying a userId parameter without proper ownership verification or session validation. Sensitive information exposed includes name, email, phone number, physical address, and SSN. The vulnerability arises because key functions handling user data are registered on unauthenticated AJAX hooks and do not validate the legitimacy of the requester. This vulnerability has a high severity rating with a CVSS score of 7.5.
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the assistant update endpoint of FlowiseAI. The endpoint allows authenticated users to modify server-controlled properties such as workspaceId, createdDate, and updatedDate when updating an assistant resource. Due to missing server-side validation and authorization checks, an attacker can manipulate the workspaceId field and reassign assistants to arbitrary workspaces. This breaks tenant isolation in multi-workspace environments. This issue has been patched in version 3.1.2.
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the chatflow update endpoint of FlowiseAI. The endpoint allows clients to modify server-controlled properties such as deployed, isPublic, workspaceId, createdDate, and updatedDate when updating a chatflow object. Due to missing server-side validation and authorization checks, an authenticated user can manipulate internal attributes of a chatflow and reassign it to another workspace. This allows cross-workspace resource reassignment and unauthorized modification of deployment and visibility settings. This issue has been patched in version 3.1.2.
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass assignment vulnerability exists in the tool update endpoint of FlowiseAI. The endpoint allows authenticated users to modify server-controlled properties such as workspaceId, createdDate, and updatedDate when updating a tool resource. Due to missing server-side validation and authorization checks, an attacker can manipulate the workspaceId field and reassign tools to arbitrary workspaces. This breaks tenant isolation in multi-workspace environments. This issue has been patched in version 3.1.2.
FlowiseAI Flowise versions prior to 3.1.2 contain a mass assignment vulnerability in the variable update endpoint. Authenticated users can modify server-controlled properties such as workspaceId without proper authorization checks, allowing reassignment of variables to arbitrary workspaces. This can break tenant isolation in multi-workspace environments. The issue has been fixed in version 3.1.2.
The Booking Package plugin for WordPress has a vulnerability in versions up to and including 1.7.16 that allows privilege escalation via account takeover. This occurs because the 'updateUser' AJAX endpoint lacks proper capability checks, enabling authenticated users with Editor-level access or higher to change the email and password of any account, including administrators. This can lead to a full site takeover.
Klamra Paycal for Aspaclaria WordPress plugin versions up to and including 1.1.4 contain an insecure direct object reference vulnerability via the 'invoice_id' parameter. This flaw allows authenticated users with subscriber-level access or higher to enumerate invoice IDs and download invoices belonging to other customers. The exposed invoices contain sensitive personally identifiable information such as full name, email, phone number, order total, line items, and customer notes.
MapPress Maps for WordPress plugin versions up to and including 2.96.6 contains an authorization bypass vulnerability due to missing ownership verification in its REST API endpoints. This allows unauthenticated attackers to read any map's data by enumerating map IDs, and authenticated users with Contributor-level or higher access to modify or delete any map regardless of ownership.
The Essential Addons for Elementor – Popular Elementor Templates & Widgets WordPress plugin is vulnerable to an information exposure vulnerability in all versions up to and including 6.6.4. The vulnerability exists in the ajax_load_more function, which does not properly restrict access to posts. This allows unauthenticated attackers to access data from password protected, private, or draft posts that should normally be inaccessible.
The Charitable – Donation Plugin for WordPress (up to version 1.8.11.1) contains an authorization bypass vulnerability that allows authenticated users with Subscriber-level access or higher to delete arbitrary media attachments. This occurs because the plugin does not validate ownership of attachment IDs when updating user avatars, enabling attackers to poison the avatar meta with attacker-chosen attachment IDs and trigger deletion.