CVE-2026-119665 WHartTest 2.2.0 through 2.8.1 Missing Authorization via task_center Scheduled-Task APIs

WHartTest 2.2.0 through 2.8.1 contains a missing authorization vulnerability in ScheduledTaskViewSet and TaskExecutionViewSet that allows authenticated users to access other projects' tasks. Attackers can set projectpk to another project's sequential ID to modify, delete, or trigger scheduled tas...

CVE-2026-119665

WHartTest versions 2.2.0 through 2.8.1 are vulnerable to a missing authorization flaw in the ScheduledTaskViewSet and TaskExecutionViewSet components. The root cause allows authenticated users to access tasks belonging to other projects by manipulating the project_pk to target sequential IDs. Exp...

CVE-2026-119665 WHartTest 2.2.0 through 2.8.1 Missing Authorization via task_center Scheduled-Task APIs

WHartTest 2.2.0 through 2.8.1 contains a missing authorization vulnerability in ScheduledTaskViewSet and TaskExecutionViewSet that allows authenticated users to access other projects' tasks. Attackers can set projectpk to another project's sequential ID to modify, delete, or trigger scheduled tas...

CVE-2026-119665: MGdaasLab WHartTest: WHartTest 2.2.0 through 2.8.1 contains a missing authorization vulnerability in ScheduledTaskViewSet and…

WHartTest 2.2.0 through 2.8.1 contains a missing authorization vulnerability in ScheduledTaskViewSet and TaskExecutionViewSet that allows authenticated users to access other projects' tasks. Attackers can set projectpk to another project's sequential ID to modify, delete, or trigger scheduled tas...