#Authorization Bypass
All CosmicBytez Labs articles tagged #Authorization Bypass, across news, security advisories, how-to guides, and projects.
- Security
CVE-2026-101084: Obot Authorization Bypass Lets Any User Reach Restricted MCP Servers
Obot's /mcp-connect gateway skipped access-control checks before v0.21.1, letting any authenticated user invoke restricted MCP tools. CVSS 9.6.
- Security
Critical TrueBooker Plugin Flaw Enables Unauthenticated Admin Account Takeover
A CVSS 9.8 authorization bypass in TrueBooker lets unauthenticated attackers change any user's email and reset the password for full takeover.
- Security
CVE-2026-57125: PraisonAI Jobs API Lets Attackers Bypass Command-Execution Approval
Unauthenticated PraisonAI Jobs API lets a forged YAML approve field bypass @require_approval, enabling unauthenticated command execution.
- Security
CVE-2026-62283: Nezha Monitoring WebSocket Terminal Stream Hijacking
CVSS 9.9: Nezha Monitoring fails to bind WebSocket terminal stream IDs to their creator, letting any authenticated user hijack another user's terminal session.
- Security
CVE-2026-19598: WordPress Pods Plugin Privilege Escalation via Authorization Bypass
CVSS 9.8 flaw in WordPress Pods plugin lets unauthenticated users escalate privileges via a flawed AJAX authorization router in versions up to 3.3.9.
- Security
CVE-2026-14365: TrueBooker WordPress Plugin Authorization Bypass Enables Unauthenticated Password Change
A second critical flaw in the TrueBooker Appointment Booking WordPress plugin allows unauthenticated attackers to change the password of any user,...
- Security
Apache CXF OAuth2 Scope Injection Lets Clients Claim Admin Privileges
A critical flaw in Apache CXF's OAuth2 Dynamic Client Registration endpoint stores attacker-supplied scope values verbatim, allowing malicious clients to...
- Security
CVE-2026-2346: Critical Authorization Bypass in Menulux Mobile App
A critical CVSS 9.8 authorization bypass vulnerability in the Menulux Software Inc. Mobile App allows unauthenticated remote attackers to bypass access...
- Security
CVE-2026-15704: Critical Auth Bypass in Eclipse BaSyx Go Components
Eclipse BaSyx Go Components up to v1.0.0 contains a CVSS 9.8 authorization bypass caused by inconsistent trailing-slash handling between the ABAC...
- Security
CVE-2026-47724: nebula-mesh API Authorization Bypass Enables Cross-Tenant Takeover (CVSS 9.9)
A critical authorization bypass in nebula-mesh, the self-hosted control plane for Slack's Nebula VPN, allows any holder of a non-admin operator API key to...
- Security
CVE-2026-65049: Ninja Forms Multisite Flaw Enables Network-Wide Data Deletion
A CVSS 9.3 critical incorrect authorization vulnerability in Ninja Forms 3.14.8 and prior for WordPress Multisite allows a subsite administrator to...
- Security
CVE-2026-47866: Authorization Bypass in VMware Avi Load Balancer
A CVSS 8.3 authorization bypass vulnerability in VMware Avi Load Balancer allows low-privileged authenticated users to access restricted Control Plane...
- Security
CVE-2026-35210: OpenCTI Authorization Bypass Allows Confidence Level and Object Marking Circumvention
An authentication bypass vulnerability in OpenCTI prior to 7.260326.0 allows any authenticated user with KNOWLEDGE_KNUPDATE permission to bypass...
- Security
CVE-2026-12153: WP Learn Manager Plugin — Unauthenticated Authorization Bypass Allows Plugin Installation
A critical CVSS 9.8 authorization bypass in the WP Learn Manager WordPress plugin allows unauthenticated attackers to install and activate arbitrary...
- Security
Coolify CVE-2026-34047: Terminal WebSocket Authorization Bypass (CVSS 9.9)
A critical authorization bypass in Coolify's terminal WebSocket bootstrap routes allows authenticated users to access server terminals for resources...
- Security
CVE-2026-11807: Critical Authorization Bypass in Event-Driven Ansible WebSocket API
A missing authorization flaw (CVSS 9.6) in Red Hat's Event-Driven Ansible allows any authenticated user to forge WebSocket messages and access plaintext...
- Security
CVE-2026-12204: ShopXO Scheduled Task Authorization Bypass
A CVSS 7.3 authorization bypass vulnerability in ShopXO up to 6.7.1 allows unauthenticated access to scheduled task endpoints in the Crontab controller,...
- Security
CVE-2026-47365: WordPress Toolkit Argument Injection in cPanel & WHM
A critical CVSS 9.9 argument injection vulnerability in WordPress Toolkit before 6.11.0 allows remote authenticated users to bypass cross-tenant...
- Security
CVE-2026-45402: Open WebUI File ID Authorization Bypass
A high-severity authorization bypass in Open WebUI prior to 0.9.5 allows authenticated users to attach arbitrary files to resources they do not own via...
- Security
Critical Session Hijacking via Auth Bypass in Akilli
CVE-2026-2347 is a CVSS 9.8 authorization bypass in Akilli's e-commerce platform, allowing attackers to hijack authenticated sessions by manipulating...
- Security
Critical Auth Bypass in InfusedWoo Pro Enables
A CVSS 9.1 authorization bypass in InfusedWoo Pro for WordPress lets unauthenticated attackers permanently delete arbitrary data across all installations...
- Security
CVE-2026-4119: WordPress Create DB Tables Plugin
A critical CVSS 9.1 authorization bypass in the WordPress Create DB Tables plugin (all versions up to 1.2.1) allows unauthenticated users to create or...
- Security
CVE-2026-40259 — SiYuan Knowledge Management Authorization
A high-severity authorization bypass in SiYuan versions 3.6.3 and below allows attackers with RoleReader publish-service tokens to call a privileged...
- Security
CVE-2026-5412: Juju Controller Facade Allows Low-Privilege
An authorization flaw in Juju's Controller facade allows any authenticated low-privilege user to call the CloudSpec API and extract the cloud provider...
- Security
CVE-2026-3445: ProfilePress WordPress Plugin Allows
A high-severity authorization flaw in the ProfilePress WordPress plugin (up to v4.16.11) lets unauthenticated or low-privilege users bypass membership...
- Security
CVE-2026-32975: OpenClaw Zalouser Weak Authorization via Mutable Group Display Names
A critical CVSS 9.8 authorization bypass in OpenClaw's Zalouser allowlist mode matches mutable group display names instead of stable identifiers, letting...
- Security
CVE-2026-32924: OpenClaw Authorization Bypass via Feishu
A critical CVSS 9.8 authorization bypass in OpenClaw allows attackers to circumvent groupAllowFrom and requireMention protections in group chats by...
- Security
CVE-2026-22172: OpenClaw Critical Authorization Bypass via WebSocket Scope Elevation
A critical CVSS 9.9 authorization bypass in OpenClaw allows authenticated users to self-declare elevated scopes over WebSocket connections without...
- Security
CVE-2026-30884: Critical Authorization Bypass in Moodle
A critical (CVSS 9.6) authorization bypass vulnerability in the moodle-mod_customcert plugin allows any teacher with manage capability in a single course...