CVE-2026-59185

identrail is a machine identity security platform for AWS, GitHub/OIDC, and Kubernetes. Prior to 1.0.2, the default-on POST /v1/workspaces/:workspaceid/projects/:projectid/github/connect/complete endpoint in internal/api/router.go accepts installationid from the request body or...

CVE-2026-59185

The identrail machine identity security platform is vulnerable to a cross-tenant Insecure Direct Object Reference (IDOR) before version 1.0.2 . The POST /v1/workspaces/:workspace_id/projects/:project_id/github/connect/complete endpoint (handled in internal/api/router.go) fails to verify that a pr...

EUVD-2026-112081

identrail is a machine identity security platform for AWS, GitHub/OIDC, and Kubernetes. Prior to 1.0.2, the default-on POST /v1/workspaces/:workspaceid/projects/:projectid/github/connect/complete endpoint in internal/api/router.go accepts installationid from the request body or...