2 matches found
CVE-2026-111717
Arkon through 0.9.2 contains a missing authorization vulnerability in listskillversions that allows authenticated employees to read other departments' skill version metadata by bypassing the canaccessskill check. Attackers holding the default skill:read permission can request GET...
5.3CVSS5.9AI score0.00269EPSS
SaveExploits0References7
CVE-2026-111717 Arkon through 0.9.2 Missing Authorization via Skills Versions API
Arkon through 0.9.2 contains a missing authorization vulnerability in listskillversions that allows authenticated employees to read other departments' skill version metadata by bypassing the canaccessskill check. Attackers holding the default skill:read permission can request GET...
5.3CVSS5.8AI score
SaveExploits0References7
20