CVE-2026-110775

Nexent versions up to and including 2.7.0 are vulnerable to a missing authorization flaw within the check_file_access function. The root cause is the failure to perform tenant comparisons during knowledge_base/ reads, which allows authenticated users in multi-tenant environments to access data be...

EUVD-2026-101575

Nexent through 2.7.0 contains a missing authorization vulnerability in checkfileaccess that allows authenticated users to read other tenants' knowledge-base files by skipping tenant comparison for knowledgebase/ reads. Attackers in multi-tenant deployments can list objects via GET /file/storage f...