CVE-2026-112786

OpenCATS versions before 0.10.0 are vulnerable to a missing authorization flaw in the ImportUI::handleRequest() function. This vulnerability allows authenticated users with low-level READ access to trigger the import module's revert action. By providing a specific importID, an attacker can perfor...