PYSEC-2026-4246 pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documents

Impact pacioli-guard's document-layer consent gate requires a human-minted, single-use, document-bound and act-bound marker before a credential carrying API Key Scope.requireconsent may submit or cancel a document. Because ERPNext performs further document writes as a consequence of a governed ac...

GHSA-3HJ7-6VMJ-H8V4 pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documents

Impact pacioli-guard's document-layer consent gate requires a human-minted, single-use, document-bound and act-bound marker before a credential carrying API Key Scope.requireconsent may submit or cancel a document. Because ERPNext performs further document writes as a consequence of a governed ac...

pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documents

Impact pacioli-guard's document-layer consent gate requires a human-minted, single-use, document-bound and act-bound marker before a credential carrying API Key Scope.requireconsent may submit or cancel a document. Because ERPNext performs further document writes as a consequence of a governed ac...

CVE-2026-107841

pacioli provides least-privilege governance and a governed agent broker for ERPNext. From version 0.9.6 until version 0.10.0, the pacioli-guard document-layer consent gate allows nested cancellation operations to ride any consent established by an enclosing governed act without checking whether t...

EUVD-2026-95937

pacioli provides least-privilege governance and a governed agent broker for ERPNext. From version 0.9.6 until version 0.10.0, the pacioli-guard document-layer consent gate allows nested cancellation operations to ride any consent established by an enclosing governed act without checking whether t...

CVE-2026-107841 pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documents

pacioli provides least-privilege governance and a governed agent broker for ERPNext. From version 0.9.6 until version 0.10.0, the pacioli-guard document-layer consent gate allows nested cancellation operations to ride any consent established by an enclosing governed act without checking whether t...

CVE-2026-107841 pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documents

pacioli provides least-privilege governance and a governed agent broker for ERPNext. From version 0.9.6 until version 0.10.0, the pacioli-guard document-layer consent gate allows nested cancellation operations to ride any consent established by an enclosing governed act without checking whether t...

CVE-2026-107841 pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documents

pacioli provides least-privilege governance and a governed agent broker for ERPNext. From version 0.9.6 until version 0.10.0, the pacioli-guard document-layer consent gate allows nested cancellation operations to ride any consent established by an enclosing governed act without checking whether t...

CVE-2026-107841

The pacioli-guard document-layer consent gate in pacioli (versions 0.9.6 through 0.10.0 ) contains an incorrect authorization vulnerability (CWE-863). The flaw allows nested cancellation operations to inherit consent from an enclosing governed act without verifying if the specific marker authoriz...

PT-2026-109294

Name of the Vulnerable Software and Affected Versions pacioli versions 0.9.6 through 0.9.6 Description The pacioli-guard document-layer consent gate allows nested cancellation operations to bypass authorization checks by riding the consent established by an enclosing governed act. A credential wi...

CVE-2026-107841: Incorrect Authorization

pacioli provides least-privilege governance and a governed agent broker for ERPNext. From version 0.9.6 until version 0.10.0, the pacioli-guard document-layer consent gate allows nested cancellation operations to ride any consent established by an enclosing governed act without checking whether t...