CVE-2026-115322

Bytebase before 3.16.0 contains an authorization bypass vulnerability in GetTaskRunLog, GetTaskRunSession and PreviewTaskRunRollback that allows authenticated users to access other projects' task runs by UID. Attackers with permission on one project can supply foreign task or task run UIDs to rea...

EUVD-2026-108124

Bytebase before 3.16.0 contains an authorization bypass vulnerability in GetTaskRunLog, GetTaskRunSession and PreviewTaskRunRollback that allows authenticated users to access other projects' task runs by UID. Attackers with permission on one project can supply foreign task or task run UIDs to rea...

CVE-2026-115322

Bytebase versions prior to 3.16.0 are vulnerable to an authorization bypass in the GetTaskRunLog, GetTaskRunSession, and PreviewTaskRunRollback functions. The root cause allows authenticated users to access task runs from other projects by supplying foreign task or task run UIDs . Impacted users ...