CVE-2026-23989

🗓️ 06 Feb 2026 18:28:25Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 41 Views🌐 WEB

REVA public link exploit bypasses scope checks via archiver to create archives; fixed in versions 2.40.3 and 2.42.3.

Reporter	Title	Published	Views	Family All 21
GithubExploit	Exploit for Incorrect Authorization in Heinlein Opencloud_Reva	29 Aug 202613:43	–	githubexploit
ATTACKERKB	CVE-2026-23989	6 Feb 202618:28	–	attackerkb
Circl	CVE-2026-23989	6 Feb 202619:16	–	circl
CNNVD	REVA 安全漏洞	6 Feb 202600:00	–	cnnvd
Cvelist	CVE-2026-23989 REVA Public Link Exploit	6 Feb 202618:28	–	cvelist
EUVD	EUVD-2026-5629	6 Feb 202618:28	–	euvd
Github Security Blog	OpenCloud Reva has a Public Link Exploit	5 Feb 202620:32	–	github
Kitploit	cve-2026-23989-opencloud-lab	12 Sep 202608:53	–	kitploit
NVD	CVE-2026-23989	6 Feb 202619:16	–	nvd
OPENSUSE Linux	opencloud-server-5.0.2-1.1 on GA media (moderate)	7 Feb 202600:00	–	opensuse

NVD

Vulners

Node

heinlein opencloud_revaRange<2.40.3

heinlein opencloud_revaRange2.41.0–2.42.3

[
  {
    "vendor": "opencloud-eu",
    "product": "reva",
    "versions": [
      {
        "version": "< 2.40.3",
        "status": "affected"
      },
      {
        "version": ">= 2.41.0, < 2.42.3",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/opencloud-eu/reva/security/advisories/GHSA-9j2f-3rj3-wgpg
github	www.github.com/opencloud-eu/reva/commit/95aa2bc5d980eaf6cc134d75782b4f5ac7b36ae1

Parameter	Position	Path	Description	CWE
id	query param	/archiver	Public-link archiver endpoint vulnerable to path-prefix scope bypass via HasPrefix check in Reva, allowing leakage of out-of-scope resources when using a public-link token.	CWE-863

17 Jun 2026 10:22Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.18.1 - 8.2

EPSS0.00278

SSVC

CWE-863