EUVD-2026-116592

ZaneOps 1.14.0 before 1.15.2 contains an authorization bypass vulnerability that allows any workspace administrator to read another workspace's pending preview environment by querying ReviewPreviewEnvDeployAPIView without project scoping. Attackers can use the project slug and environment name fr...

CVE-2026-121734

ZaneOps 1.14.0 before 1.15.2 contains an authorization bypass vulnerability that allows any workspace administrator to read another workspace's pending preview environment by querying ReviewPreviewEnvDeployAPIView without project scoping. Attackers can use the project slug and environment name fr...

CVE-2026-121734

ZaneOps versions 1.14.0 before 1.15.2 are vulnerable to an authorization bypass in the ReviewPreviewEnvDeployAPIView component. The root cause is a lack of project scoping , allowing any workspace administrator to access another workspace's pending preview environment. By using a project slug and...