CVE-2026-124436

OpenRemote versions prior to 1.32.2 are vulnerable to an improper authorization flaw (CWE-863). The issue stems from admin endpoints lacking sufficient super administrator checks, allowing realm administrators to access and modify global resources . Specifically, an attacker can manipulate the gl...