Threats affecting pkg:github/bk-cmdb

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-119648TencentBlueKing bk-cmdb · Missing Authorization Medium5.32026-10-30CVE Database V5CVE-2026-119648 Tencent BlueKing CMDB (bk-cmdb) versions up to 3.14.6 have a missing authorization vulnerability that allows authenticated users to access host information from other businesses. This occurs via the POST /api/v3/hosts/search/asstdetail endpoint, which improperly skips authorization checks, enabling unauthorized host data retrieval. Vulnerability	CVE Database V5	2026-10-30

Page 1 of 1