Threats tagged 'ghsa-48q5-8whv-r6xj'

CVE-2026-104054 is a medium severity vulnerability in calcom cal.diy versions 6.0, 6.1, and 6.2.0. It involves missing authorization in the doesUserIdHaveAccessToBooking function within the PBAC Permission Engine component. The flaw can be exploited remotely without user interaction. Although exploit code is publicly available, no official fix has yet been accepted.