PT-2026-97023

Name of the Vulnerable Software and Affected Versions Nautobot versions 3.0.0 through 3.1.7 Description An authorization bypass exists in the generic ApprovalWorkflowStageResponse create endpoint. This endpoint fails to enforce approver-group membership, the change permission on the object under...

CVE-2025-22236

Minion event bus authorization bypass. An attacker with access to a minion key can craft a message which may be able to execute a job on other minions = 3007.0. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...