SUSE CVE-2026-24124

Dragonfly is an open source P2P-based file distribution and image acceleration system. In versions 2.4.1-rc.0 and below, the Job API endpoints /api/v1/jobs lack JWT authentication middleware and RBAC authorization checks in the routing configuration. This allows any unauthenticated user with acce...

CVE-2026-24124

creationtimestamp| type| source ---|---|--- 2026-01-22 04:18:10+00:00| published-proof-of-concept| https://github.com/dragonflyoss/dragonfly/security/advisories/GHSA-j8hf-cp34-g4j7 2026-01-22 23:53:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md2f27td5h2h 2026-01-24...