CVE-2026-100360

Prior to versions 7.15.2 and 8.10.2 , SuiteCRM is vulnerable to an authorization bypass in its V8 API relationship write paths . The root cause is a failure to consistently enforce object-level edit and view authorization on both related records. For example, in an Account-to-Contact scenario, an...