CVE-2026-15557

creationtimestamp| type| source ---|---|--- 2026-07-14 01:15:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkzsyepf42x...

CVE-2026-15557

CVE-2026-15557 affects waooAI waoowaoo up to version 0.4.1. The vulnerability resides in the Internal Task Header Handler’s API-auth logic (functions getInternalTaskSession, getAuthSession, requireUserAuth, requireProjectAuth, requireProjectAuthLight in src/lib/api-auth.ts). Malicious manipulatio...