GO-2026-4356 Dragonfly Manager Job API Unauthenticated Access in d7y.io/dragonfly

Dragonfly Manager Job API Unauthenticated Access in d7y.io/dragonfly...

EUVD-2026-3805

Dragonfly Manager Job API Unauthenticated Access...

Dragonfly Manager Job API Unauthenticated Access

Dragonfly Manager's Job REST API endpoints lack authentication, allowing unauthenticated attackers to create, query, modify, and delete jobs, potentially leading to resource exhaustion, information disclosure, and service disruption...

Duplicate

This advisory duplicates another...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication via the Manager web UI endpoints /api/v1/jobs and /preheats. An attacker can gain unauthorized access to create, delete, or modify jobs, and initiate preheat jobs by sending unauthenticated requests to these...