CVE-2026-77169

Katalog CVE

CVSS 6.5 · Medium EPSS 0,47%

Kerentanan Improper Access Control. Skor CVSS 3.0 6.5 (Medium) menurut hackerone.com.

Deskripsi (NVD)

A vulnerability in the team folders (formerly group folders) app when used in combination with the workspace app allowed API/REST-only delegated administrators to bypass folder-level authorization controls. The workspace app enables organizations to delegate limited administrative privileges for team folder management via API/REST only, restricting access to folders for which the admin has advanced permissions.

Rincian

Terbit di NVD

18 September 2026

Terakhir diubah

18 September 2026

Status NVD

Deferred

CVSS 3.0

6.5 (Medium), sumber hackerone.com
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-284: Improper Access Control

EPSS (30 hari)

0,47% peluang dieksploitasi; lebih tinggi dari 38,8% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://hackerone.com/reports/3674940