CVE-2026-115322

Bytebase versions prior to 3.16.0 are vulnerable to an authorization bypass in the GetTaskRunLog, GetTaskRunSession, and PreviewTaskRunRollback functions. The root cause allows authenticated users to access task runs from other projects by supplying foreign task or task run UIDs . Impacted users ...