CVE-2026-52742

GoCD (continuous delivery server) versions 12.3.1 through 26.1.0 are affected by an authorization bypass in legacy routes under /go/admin/restful/*. These routes expose the full historical server configuration to pipeline group administrators rather than restricting responses to only the groups t...