CVE-2024-9000

In lunary-ai/lunary before version 1.4.26, the checklists.post endpoint allows users to create or modify checklists without validating whether the user has proper permissions. This missing access control permits unauthorized users to create checklists, bypassing intended permission checks...

PT-2025-12259

Name of the Vulnerable Software and Affected Versions lunary-ai/lunary versions prior to 1.4.26 Description The issue concerns a lack of access control in the checklists.post endpoint, allowing users to create or modify checklists without proper permission checks. This enables unauthorized users ...

CVE-2024-9000: Missing Authorization

In lunary-ai/lunary before version 1.4.26, the checklists.post endpoint allows users to create or modify checklists without validating whether the user has proper permissions. This missing access control permits unauthorized users to create checklists, bypassing intended permission checks...