CVE-2026-127102

Eclipse BaSyx Go Components versions up to and including 1.1.2 are vulnerable to an incorrect authorization issue in ABAC-enabled deployments of the Submodel Repository and the AAS Environment. The vulnerability exists because the GET /submodels/{submodelIdentifier}/submodel-elements list route i...

EUVD-2026-125345

In Eclipse BaSyx Go Components versions up to and including 1.1.2, ABAC-enabled deployments of the Submodel Repository and the AAS Environment return Submodel Elements that the caller is not authorized to read from GET /submodels/submodelIdentifier/submodel-elements. If an access rule grants READ...