CVE-2026-115321

Bytebase before 3.16.0 contains an authorization bypass vulnerability in the UpdateIssueComment handler that allows low-privileged project users to modify comments in other projects by supplying a foreign comment UID. Attackers with any project role, including Project Viewer, can set their own...

EUVD-2026-108123

Bytebase before 3.16.0 contains an authorization bypass vulnerability in the UpdateIssueComment handler that allows low-privileged project users to modify comments in other projects by supplying a foreign comment UID. Attackers with any project role, including Project Viewer, can set their own...

CVE-2026-115321

Bytebase versions before 3.16.0 are susceptible to an authorization bypass vulnerability within the UpdateIssueComment handler. The root cause allows low-privileged users, including those with a Project Viewer role, to overwrite comments in projects they cannot access. This is achieved by setting...