EUVD-2026-66611

Midday allows any member of a team to delete it. The delete procedure in apps/api/src/trpc/routers/team.ts authorises the caller with the team-access helper, which returns true for every row in the team-membership table irrespective of the role it records, and the data-layer function it calls...

PYSEC-2026-3642 Open WebUI: Unapproved accounts can open terminal sessions via a WebSocket auth path missing the role check

Summary The terminal WebSocket route authenticates its own first-message JWT instead of going through the HTTP dependency chain, and never applies the role check that getverifieduser enforces on every HTTP terminal route. An account whose role is pending, meaning registered but not approved, or...

PT-2026-76475

Summary The terminal WebSocket route authenticates its own first-message JWT instead of going through the HTTP dependency chain, and never applies the role check that get verified user enforces on every HTTP terminal route. An account whose role is pending, meaning registered but not approved, or...

GHSA-5GPJ-VJ23-VHHV Open WebUI: Unapproved accounts can open terminal sessions via a WebSocket auth path missing the role check

Summary The terminal WebSocket route authenticates its own first-message JWT instead of going through the HTTP dependency chain, and never applies the role check that getverifieduser enforces on every HTTP terminal route. An account whose role is pending, meaning registered but not approved, or...

PT-2026-67858

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.8.8 through 0.10.9 Description The terminal WebSocket route in backend/open webui/routers/terminals.py fails to apply the verified-user role gate that is enforced on HTTP terminal routes. Specifically, the resolve...

CVE-2026-55550: Improper Privilege Management

NextCRM is open-source customer relationship management CRM software. The CRM product catalog is an organization-wide business object. Normal application server actions restrict product creation, update, and deletion to manager and admin roles. However, in version 0.12.1, the MCP product tools...

PT-2026-61737

Name of the Vulnerable Software and Affected Versions NextCRM versions 0.12.1 through 0.12.2 Description NextCRM allows authenticated low-privileged users to perform unauthorized write operations on the shared CRM product catalog. While standard application server actions restrict product creatio...

Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage

Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage Summary This vulnerability exists in Devtron's Attributes API interface, allowing any authenticated user including low-privileged CI/CD Developers to obtain the global API Token signing key by accessing the...

glider_StakedUSDeV2

StakedUSDeV2 Uninitialized Role Variable PoC Vulnerability...

JBoss: AuthorizationInterceptor allows JMX operation to proceed despite authorization failure

The AuthorizationInterceptor in JBoss Enterprise Application Platform EAP before 5.2.0, Web Platform EWP before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 does not properly restrict access, which allows remote authenticated users to bypass intended role restrictions and...

CVE-2010-1617

CVE-2010-1617 (Moodle) : A flaw in Moodle’s access check on user/view.php allows remote authenticated users to obtain the full names of other users via the course profile page. Affected: Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8. Exploitation context and impact are stated in multiple advi...