Threats tagged 'ghsa-34hp-73hm-xf3h'

CVE-2026-86136 is a vulnerability in the wgagent management daemon where a missing authorization check in the session initialization function allows an authenticated low-privileged user to crash the daemon process and read arbitrary files accessible to it. This can be triggered by submitting a specially crafted management API request. The vulnerability affects the confidentiality and availability of the system.