Threats affecting pkg:npm/hcengineering/huly_platform

CVE-2026-12212 is a medium severity vulnerability in hcengineering Huly Platform versions 0.1 through 0.7.0. It involves improper access controls in the getMailboxSecret function within the RPC Interface component. The vulnerability can be exploited remotely without user interaction or elevated privileges. The vendor has not responded to the disclosure, and no official patch or mitigation guidance is currently available.