Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.16.1, the multi-user API server treats the empty namespace used by shared or global pipelines as an authorization exception for modification and deletion operations. An authenticated user can modify or delete shared pipeline definitions and versions without the required Kubernetes RBAC permissions, compromising their integrity and availability. Read-only access to shared pipelines remains intentional, single-user deployments intentionally bypass multi-user checks, and execution of a modified pipeline is a conditional downstream consequence. The separate shared-pipeline multipart upload authorization path is outside this advisory and is not remediated by version 2.16.1. This issue is fixed in version 2.16.1.
CVE-2026-54143 is a critical OS command injection vulnerability in the open-source OpenHuman agent by tinyhumansai. Versions prior to 0.57.13 allow an attacker who can send messages to a configured external channel to create persistent shell cron jobs without user approval. These jobs execute with the privileges of the OpenHuman runtime user. The vulnerability also permits leading environment assignments that can redirect allowed commands to executable helpers already present on the host. This can lead to unauthorized persistent command execution and compromise of data and resources accessible to OpenHuman. The issue is fixed in version 0.57.13.
OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.56.0 on macOS, the runtime injected into a supported remote account webview such as Google Meet allows page JavaScript to call getDisplayMedia without a live user gesture. Instead of rejecting the request, the shim falls through to native Chromium capture behavior, and the embedded CEF environment can auto-select the primary display because it lacks the normal desktop-media picker. If OpenHuman already has macOS Screen Recording permission and an attacker obtains JavaScript execution in an allowed embedded origin, the attacker can obtain a real desktop capture stream without a new user gesture. The stream can expose chats, documents, source code, email, meeting content, credentials, one-time codes, and other visible desktop information. The separate direct screen_share_begin_session IPC path failing origin validation does not prevent exploitation through getDisplayMedia. This issue is fixed in version 0.56.0.
A critical improper authorization vulnerability (CVE-2026-95860) exists in node-opcua versions from 2.42.0 up to but not including 2.180.0. The issue arises because namespace-level default role permissions configured via setDefaultRolePermissions are not enforced for nodes lacking explicit per-node RolePermissions. This allows anonymous clients to write variables or invoke methods despite restrictive namespace defaults. The flaw is fixed in version 2.180.0.
The System REST APIs do not correctly enforce access control mechanisms, allowing users with lower privilege roles to execute administrative actions that should be restricted. This weakness permits unauthorized operations on the affected product.
Successful exploitation could enable a malicious actor to perform unauthorized administrative operations, including executing administrative functions. APIs exposed through the WSO2 API Manager's API Gateway are not affected by this vulnerability.
CVE-2026-77152 is an improper authorization vulnerability in the Field Collection module for Drupal 7. It allows users with the "edit field collections" permission to bypass access controls on the parent entity. Specifically, such users can edit or delete field collection items attached to entities they do not have permission to edit. The flaw exists in versions 7.x-1.0 through 7.x-1.2 of the module. The vulnerability is due to the access check granting edit and delete rights without verifying access to the host entity. The fix requires verifying access to the parent entity in addition to the field collection permission.
Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.0, the Variants Livewire component in `packages/admin/src/Livewire/Components/Products/Form/Variants.php` exposes `DeleteAction` and `DeleteBulkAction` without server-side authorization. An authenticated staff user with `edit_products` can access `/shopper/products/{id}/edit` and obtain the signed component state even without `delete_product_variants`. The `callTableAction` and `callTableBulkAction` paths then permanently delete individual or multiple variants without checking that dedicated permission. For variant products, this can destroy the sellable catalogue and disrupt storefront product pages, cart, and checkout. This issue is fixed in version 2.10.0.
Immich is a high-performance self-hosted photo and video management solution. Prior to 3.2.0, the shared-link creation API accepted albumId and assetIds as independent fields in server/src/services/shared-link.service.ts but authorized only the resource selected by the requested link type. An authenticated attacker who already knew a victim-owned asset UUID could select SharedLinkType.Album for an attacker-owned album while supplying that UUID in assetIds; SharedLinkService.create() persisted the unchecked association in shared_link_asset and made the victim asset available through the new anonymous shared-link credential. This exposed victim metadata, thumbnails, and the byte-identical original file and created a persistent sharing relationship that could be redistributed. This issue is fixed in version 3.2.0.
CVE-2026-55551 is an improper authorization vulnerability in the infonl dimpact-zaakafhandelcomponent (ZAC) prior to version 5.2.0. It allows authenticated low-privileged municipal users to access sensitive case management data across unauthorized case types by exploiting missing authorization checks on certain by-id read endpoints. The flaw permits reading decisions, audit histories, process diagrams, and mailbox configurations without proper policy enforcement. The issue is fixed in version 5.2.0.
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.7, authenticated IDOR on admin/auth-token endpoint allows any administrator to read and overwrite another administrator's API tokens. This issue has been patched in version 1.0.8.7.
IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running background workflow job by sending a single HTTP request, resulting in loss of in-progress compute work with no flow-level permission check.
CVE-2026-113696 is an improper authorization vulnerability in the SmartIT change approval feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01. It allows authenticated users with limited privileges to make unauthorized changes to approval states, bypassing intended approval restrictions.
CVE-2026-113694 is an improper authorization vulnerability in the SmartIT user attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01. It allows authenticated users with limited privileges to access or modify attachments belonging to other users without proper authorization. The vulnerability has a medium severity with a CVSS 4.0 base score of 5.3.
CVE-2026-42949 is an authorization bypass vulnerability in the /api/runscript endpoint of Frangoteam FUXA version 1.3.2-2809. This flaw allows an unauthenticated attacker to execute privileged operations by sending a specially crafted HTTP request. The vulnerability has a medium severity rating with a CVSS score of 5.6.
CVE-2026-42922 is a critical authorization bypass vulnerability in the /nodered functionality of Frangoteam FUXA version 1.3.2-2809. It allows unauthenticated attackers to send specially crafted HTTP requests that can lead to arbitrary code execution on the affected system.
An authenticated user in Grafana can read SSO client secrets and modify instance-wide SSO settings without the required permissions (missing authorization). This affects Grafana OSS and Enterprise 13.2 installations with the experimental kubernetesSsoSettingsApi feature toggle enabled, which is disabled by default.
CVE-2026-56828 is an improper authorization vulnerability in shopperlabs shopper versions 2.8.0 up to but not including 2.8.1. It allows a staff member with limited permissions (view_users and access_dashboard) to escalate privileges by mutating permissions, creating administrators, or deleting roles. The flaw stems from incorrect permission checks in several Livewire admin components, enabling unauthorized actions such as granting arbitrary permissions, creating pre-verified administrators, and deleting roles, which can cause denial of service. This vulnerability is fixed in version 2.8.1.
MISP Guard, a proxy enforcing security policies on MISP feed data, had an improper input validation vulnerability in its taxonomy tag checks. The guard verified only that at least one tag from a required taxonomy was allowed, but failed to ensure all tags from that taxonomy were allowed. This flaw allowed events or attributes to carry both allowed and non-allowed tags simultaneously, bypassing data classification restrictions. An attacker with event authoring or modification rights could exploit this to distribute higher-classification data through feeds intended for lower-classification data. The vulnerability affected event-level and attribute-level tags, including nested and shadow attributes. It was fixed in misp-guard version 1.4.
Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update service metadata. A patch is provided for ArcGIS Server software in General Availability and Extended support status, which includes versions 12.0, 11.5, and 11.3. Other versions are in mature or retired status, which are not patch eligible. Users working with unlisted versions are advised to upgrade and apply the patch.
A vulnerability in obsidian-tc versions 1.13.0 through 1.31.3 allows improper authorization of certain destructive vault operations. When deployed with Streamable HTTP and auth.jwtSecret configured, a client supporting elicitation.form could bypass human approval by resubmitting a valid requestState, causing the server to trust the approval state incorrectly. This affects only tools marked as destructive or requiring human-in-the-loop scope. The issue is fixed in version 1.31.4.