CVE-2026-18744 CVE-2026-18744

Any authenticated case participant can fetch any OTHER vendor's CaseStatement + per-vul CaseMemberStatus by supplying that member's id — testfunc only checks ismycase, not ownership of kwargs'member'. Bypasses sharestatus; leaks embargoed vendor affected/not-affected + statement text cross-tenant...

CVE-2026-18744

CVE-2026-18744 involves a cross-tenant data exposure where an authenticated case participant can retrieve another vendor’s CaseStatement and per-vul CaseMemberStatus by supplying a member id. The root cause, as described, is that the test_func only checks _is_my_case and does not validate ownersh...