CVE-2026-111717 Arkon through 0.9.2 Missing Authorization via Skills Versions API

Arkon through 0.9.2 contains a missing authorization vulnerability in listskillversions that allows authenticated employees to read other departments' skill version metadata by bypassing the canaccessskill check. Attackers holding the default skill:read permission can request GET...

CVE-2026-111717

The Arkon software, through version 0.9.2 , is vulnerable to a missing authorization flaw in the list_skill_versions function. The root cause is a failure to properly enforce the can_access_skill check, allowing authenticated employees with the default skill:read permission to bypass intended res...

PT-2026-116116

Arkon through 0.9.2 contains a missing authorization vulnerability in list skill versions that allows authenticated employees to read other departments' skill version metadata by bypassing the can access skill check. Attackers holding the default skill:read permission can request GET...