EUVD-2026-10558

StudioCMS: IDOR — Arbitrary API Token Revocation Leading to Denial of Service...

GHSA-8RGJ-VRFR-6HQR StudioCMS: IDOR — Arbitrary API Token Revocation Leading to Denial of Service

Summary The DELETE /studiocmsapi/dashboard/api-tokens endpoint allows any authenticated user with editor privileges or above to revoke API tokens belonging to any other user, including admin and owner accounts. The handler accepts tokenID and userID directly from the request payload without...

EUVD-2026-10557

StudioCMS: IDOR — Arbitrary API Token Revocation Leading to Denial of Service...

studiocms (>=0.1.0-beta.26, <=0.1.0) potentially affected by CVE-2026-30945 via @withstudiocms/auth-kit (0.1.0-beta.6)

@withstudiocms/auth-kit NPM version 0.1.0-beta.6 is affected by a known vulnerability. The following packages have a transitive dependency on @withstudiocms/auth-kit and may be impacted: - studiocms =0.1.0-beta.26, =0.1.0 Source cves: CVE-2026-30945 Source advisory:...

@studiocms/migrator (>=0.2.0, <=0.2.1) potentially affected by CVE-2026-30945 via studiocms (>=0.2.0, <=0.3.0)

studiocms NPM version =0.2.0, =0.2.0, =0.2.1 Source cves: CVE-2026-30945 Source advisory: SNYK:JS-STUDIOCMS-15518585...

Authorization Bypass Through User-Controlled Key

Overview @withstudiocms/api-spec is an API Specification for StudioCMS Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the DELETE /studiocmsapi/dashboard/api-tokens endpoint. An attacker can revoke API tokens belonging to other users,...

PT-2026-24822

Summary The REST API createUser endpoint uses string-based rank checks that only block creating owner accounts, while the Dashboard API uses indexOf-based rank comparison that prevents creating users at or above your own rank. This inconsistency allows an admin to create additional admin accounts...

StudioCMS 安全漏洞

StudioCMS is StudioCMS open source a content management system . StudioCMS has a security vulnerability that can be exploited by an attacker to cause an administrator to create additional administrator accounts via the REST API...

StudioCMS 安全漏洞

StudioCMS is StudioCMS open source a content management system . A security vulnerability exists in StudioCMS that can be exploited by an attacker to cause an authenticated user to perform arbitrary file operations on S3 storage buckets...

PT-2026-24818

StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.3.1, the S3 storage manager's isAuthorized function is declared async returns Promise but is called without await in both the POST and PUT handlers. Since a Promise object is always truthy in...

CVE-2026-32104: Authorization Bypass Through User-Controlled Key

StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.3, the updateUserNotifications endpoint accepts a user ID from the request payload and uses it to update that user's notification preferences. It checks that the caller is logged in but never...

StudioCMS 安全漏洞

StudioCMS is StudioCMS open source a content management system . A security vulnerability exists in StudioCMS that can be exploited by an attacker to cause any authenticated user to modify the notification preferences of other users...

CVE-2026-32106: Improper Privilege Management

StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.3, the REST API createUser endpoint uses string-based rank checks that only block creating owner accounts, while the Dashboard API uses indexOf-based rank comparison that prevents creating users at...

CVE-2026-32101: Incorrect Authorization

StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.3.1, the S3 storage manager's isAuthorized function is declared async returns Promise but is called without await in both the POST and PUT handlers. Since a Promise object is always truthy in...

StudioCMS 授权问题漏洞

StudioCMS is StudioCMS open source a content management system . StudioCMS suffers from an authorization issue vulnerability that stems from improper access control in the password reset token generation endpoint, which can be exploited by an attacker to cause an administrator to take over a...

CVE-2026-32103: Authorization Bypass Through User-Controlled Key

StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.3, the POST /studiocmsapi/dashboard/create-reset-link endpoint allows any authenticated user with admin privileges to generate a password reset token for any other user, including the owner account...

studiocms (>=0.1.0-beta.26, <=0.1.0) potentially affected by CVE-2026-30944 via @withstudiocms/auth-kit (0.1.0-beta.6)

@withstudiocms/auth-kit NPM version 0.1.0-beta.6 is affected by a known vulnerability. The following packages have a transitive dependency on @withstudiocms/auth-kit and may be impacted: - studiocms =0.1.0-beta.26, =0.1.0 Source cves: CVE-2026-30944 Source advisory:...

EUVD-2026-10556

StudioCMS has Privilege Escalation via Insecure API Token Generation...

Incorrect Authorization

Overview studiocms is an A Community-Driven Astro native CMS. Built from the ground up by the Astro community. Affected versions of this package are vulnerable to Incorrect Authorization through the api-tokens endpoint, which allows an authenticated user with editor privileges or higher to genera...

@studiocms/migrator (>=0.2.0, <=0.2.1) potentially affected by CVE-2026-30944 via studiocms (>=0.2.0, <=0.3.0)

studiocms NPM version =0.2.0, =0.2.0, =0.2.1 Source cves: CVE-2026-30944 Source advisory: SNYK:JS-STUDIOCMS-15518582...