EUVD-2026-110514

OpenPanel before 3.0.0 contains a missing authorization vulnerability in the onboarding.project tRPC mutation that allows non-admin organization members to create projects and mint write-type ingestion credentials, bypassing the admin-only policy. Attackers can repeatedly call the endpoint with a...

CVE-2026-116806

OpenPanel versions prior to 3.0.0 are susceptible to a missing authorization vulnerability within the onboarding.project tRPC mutation. This flaw allows non-admin organization members to bypass admin-only policies to create projects and mint write-type ingestion credentials . An attacker using a ...