Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation via the DaprPubSubConsumer process. An attacker can redirect or exfiltrate messages and bypass intended routing and topic-level access controls by publishing specially crafted CloudEvents with manipulated...

PT-2026-46141

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The local MQTT broker fails to enforce topic-level Access Control Lists ACLs, which are rules that define which clients can access specific topics. This allows a...