CVE-2026-67348

Julep exposes an insecure direct object reference in GET /executions/{execution_id} (get_execution_details). The vulnerability lets authenticated tenants read another tenant’s execution data by supplying arbitrary execution_id values, exposing task inputs, outputs, metadata, and temporal task tok...

PT-2026-66498

Julep contains an insecure direct object reference vulnerability in the get execution details endpoint that allows authenticated tenants to read another tenant's execution data. Attackers can supply arbitrary execution id values to retrieve sensitive execution records including task inputs,...