CVE-2026-48599

🗓️ 15 Jun 2026 21:55:28Reported by EEFType

cve🔗 web.nvd.nist.gov👁 19 Views🌐 WEB

Authorization bypass via path binding in elixir-grpc transcoding attackers override path fields.

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2026-48599	16 Jun 202600:15	–	circl
Cvelist	CVE-2026-48599 Authorization bypass via path binding override in elixir-grpc/grpc HTTP transcoding	15 Jun 202621:55	–	cvelist
EUVD	EUVD-2026-37013	15 Jun 202621:55	–	euvd
NVD	CVE-2026-48599	15 Jun 202623:16	–	nvd
OSV	EEF-CVE-2026-48599 Authorization bypass via path binding override in elixir-grpc/grpc HTTP transcoding	15 Jun 202621:55	–	osv
Positive Technologies	PT-2026-49532	15 Jun 202600:00	–	ptsecurity
Vulnrichment	CVE-2026-48599 Authorization bypass via path binding override in elixir-grpc/grpc HTTP transcoding	15 Jun 202621:55	–	vulnrichment

CNA

Node

elixir-grpc grpcRange0.8.0–1.0.0

[
  {
    "collectionURL": "https://repo.hex.pm",
    "cpes": [
      "cpe:2.3:a:elixir-grpc:grpc:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "modules": [
      "'Elixir.GRPC.Server.Transcode'"
    ],
    "packageName": "grpc",
    "packageURL": "pkg:hex/grpc",
    "product": "grpc",
    "programFiles": [
      "lib/grpc/server/transcode.ex"
    ],
    "programRoutines": [
      {
        "name": "'Elixir.GRPC.Server.Transcode':map_request/5"
      }
    ],
    "repo": "https://github.com/elixir-grpc/grpc",
    "vendor": "elixir-grpc",
    "versions": [
      {
        "lessThan": "1.0.0",
        "status": "affected",
        "version": "0.8.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "collectionURL": "https://github.com",
    "cpes": [
      "cpe:2.3:a:elixir-grpc:grpc:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "modules": [
      "'Elixir.GRPC.Server.Transcode'"
    ],
    "packageName": "elixir-grpc/grpc",
    "packageURL": "pkg:github/elixir-grpc/grpc",
    "product": "grpc",
    "programFiles": [
      "lib/grpc/server/transcode.ex"
    ],
    "programRoutines": [
      {
        "name": "'Elixir.GRPC.Server.Transcode':map_request/5"
      }
    ],
    "repo": "https://github.com/elixir-grpc/grpc",
    "vendor": "elixir-grpc",
    "versions": [
      {
        "lessThan": "33b6a095dbc91c6dee3c7b90893d7d74952e82e4",
        "status": "affected",
        "version": "8aaf3d3a8c4c7b08ac65e9c6f254e0d24da1d048",
        "versionType": "git"
      }
    ]
  }
]

Source	Link
github	www.github.com/elixir-grpc/grpc/commit/33b6a095dbc91c6dee3c7b90893d7d74952e82e4
cna	www.cna.erlef.org/cves/CVE-2026-48599.html
osv	www.osv.dev/vulnerability/EEF-CVE-2026-48599
github	www.github.com/elixir-grpc/grpc/security/advisories/GHSA-mwr4-5g34-j5cq

Parameter	Position	Path	Description	CWE
user_id	query param	GET /users/me/profile	Authorization bypass via path-bound field overridden by attacker-supplied user_id in query string	CWE-639
user_id	request body	POST /users/me/profile	Authorization bypass via path-bound field overridden by attacker-supplied user_id in request body	CWE-639

17 Jun 2026 10:55Current

5.4Medium risk

Vulners AI Score5.4

CVSS 47.6

EPSS0.00273

SSVC

CWE-639