CVE-2026-124573

The software logseq versions 2.0.1 and 2.0.2 contains a vulnerability in the Local HTTP API component. Specifically, the validate-auth-token function located in src/electron/electron/server.cljs fails to properly enforce authentication, leading to a missing authentication flaw (CWE-306 , CWE-287 ...