CVE-2026-127087

The Ryot application versions prior to 10.5.6 is vulnerable to an authorization bypass via the revokeAccessLink GraphQL mutation. An authenticated user can revoke access links belonging to other users by providing an arbitrary accessLinkId. Attackers can source these IDs from public share URLs , ...