EUVD-2026-119564

OpenRemote before 1.32.2 contains an improper authorization vulnerability that allows realm administrators to access and modify global resources by calling admin endpoints lacking super administrator checks. Attackers can change the global keycloakUrl via /configuration/manager to redirect other...

CVE-2026-124436

OpenRemote versions prior to 1.32.2 are vulnerable to an improper authorization flaw (CWE-863). The issue stems from admin endpoints lacking sufficient super administrator checks, allowing realm administrators to access and modify global resources . Specifically, an attacker can manipulate the gl...

PT-2026-139952

OpenRemote before 1.32.2 contains an improper authorization vulnerability that allows realm administrators to access and modify global resources by calling admin endpoints lacking super administrator checks. Attackers can change the global keycloakUrl via /configuration/manager to redirect other...

CVE-2026-124436: openremote core: OpenRemote before 1.32.2 contains an improper authorization vulnerability that allows realm administrators to access…

OpenRemote before 1.32.2 contains an improper authorization vulnerability that allows realm administrators to access and modify global resources by calling admin endpoints lacking super administrator checks. Attackers can change the global keycloakUrl via /configuration/manager to redirect other...