EUVD-2026-91126

deeptutor 1.4.0 contains an authorization bypass through a user-controlled object identifier in TutorBotManager.writebotfile. A remote caller can enumerate bot IDs and overwrite another bot's whitelisted control files through the HTTP tutorbot file route...

CVE-2026-51879

The Deeptutor version 1.4.0 is affected by an authorization bypass vulnerability within the TutorBotManager.write_bot_file component. The flaw stems from the use of a user-controlled object identifier , which allows a remote caller to enumerate bot IDs and overwrite whitelisted control files belo...