CWE-863: Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
Also known as AuthZ.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- f5 nginx open source, nginx plus +1 moreNGINX ngx_stream_ssl_module vulnerability5.3 Medium
- apache artemis, apache software foundation activemq artemis +1 moreApache Artemis, Apache ActiveMQ Artemis: Temporary address auto-created for OpenWire consumer without createAddress permission2.3 Low
- galaxy software services vitals esp, gss vitalsesp +1 moreGalaxy Software Services｜Vitals ESP - Incorrect Authorization8.7 High
- wwbn avideoAVideo's Video Moderator Privilege Escalation via Ownership Transfer Enables Arbitrary Video Deletion7.6 High
- discourseDiscourse Allows Unauthorized Access to Deleted Posts Index via Group Membership4.9 Medium
- discoursePM access granted through invites after access revocation5.9 Medium
- discourseDiscourse user can create Zendesk tickets even when it does not have access to topic5.1 Medium
- discourseDiscourse has a Hidden Solved topics permission bypass5.4 Medium
- parse-community parse-serverParse Server: LiveQuery bypasses CLP pointer permission enforcement7.1 High
- etcdetcd: Nested etcd transactions bypass RBAC authorization checks0.0 None
- go-vikunja vikunjaVikunja’s Improper Access Control Enables Bypass of Administrator-Imposed Account Disablement8.1 High
- go-vikunja vikunjaRead-only Vikunja users can delete project background images via broken object-level authorization5.3 Medium
- discourseDiscourse has a poll authorization bypass via post_id array parameter5.3 Medium
- discourseDiscourse hardens chat DM channel creation and expansion5.4 Medium
- discourseDiscourse vulnerable to group membership addition permission bypass via discourse-policy plugin2.3 Low
- discourseDiscourse discloses restricted post-action counts to non-privileged users6.9 Medium
- open-emr openemrOpenEMR: zhAclCheck Ignores Explicit ACL Denies7.3 High
- keystonejs keystone@keystone-6/core: `isFilterable` bypass via `cursor` parameter in findMany4.3 Medium
- zitadelZITADEL is missing enforcement of organization scopes5.3 Medium
- dadrus heimdallHeimdall: Path received via Envoy gRPC corrupted when containing query string8.2 High
- filebrowserFile Browser has an Authorization Policy Bypass in its Public Share Download Flow6.5 Medium
- canonical jujuUnauthorized access to Kubernetes secrets in Juju8.8 High
- step-security harden-runnerEgress Policy Bypass via DNS over HTTPS (DoH) in Harden-Runner (Community Tier)4.6 Medium
- step-security harden-runnerEgress Policy Bypass via DNS over TCP in Harden-Runner (Community Tier)4.6 Medium
- filebrowserFile Browser has an Access Rule Bypass via Path Traversal in Copy/Rename Destination Parameter6.5 Medium
- b3log siyuanSiYuan: Authorization Bypass Allows Arbitrary SQL Execution via Search API9.8 Critical
- mattermost, mattermost server +1 moreTeam Admin Privilege Escalation to Demote Members to Guest3.8 Low
- mattermost, mattermost server +1 morePermission Bypass in Playbook Run Creation4.3 Medium
- craftcms cms, craft cms +1 moreCraft CMS Vulnerable to Privilege Escalation/Bypass through UsersController->actionImpersonateWithToken()7.7 High
- jlowin fastmcp, red hat developer hub, openshift ai (rhoai) +1 more +3 moreFastMCP OAuth Proxy token reuse across MCP servers7.4 High
- mattermost, mattermost server +1 moreGuest users can bypass read permissions via search API4.3 Medium
- mattermost, mattermost server +1 morePassword Change Bypass via Auth Switch Endpoint3.1 Low
- mattermost, mattermost server +1 moreGuest user can upload files without permission across teams4.3 Medium
- mattermost, mattermost server +1 moreAdmin RCE via Malicious Plugin Upload on CI Test Instances6.6 Medium
- samsung android, samsung mobile devices +1 moreImproper authorization in Settings prior to SMR Mar-2026 Release 1 allows local attacker to...4.8 Medium
- mintplexlabs anythingllm, mintplex-labs anything-llm +1 moreAnythingLLM access control bypass: suspended users can continue using Browser Extension API keys2.7 Low
- mintplexlabs anythingllm, mintplex-labs anything-llm +1 moreAnythingLLM Manager Privilege Bypass Allows Access to Admin-Only System Preferences3.8 Low
- openclawOpenClaw < 2026.3.11 - Session Sandbox Escape via session_status Tool9.2 Critical
- openclawOpenClaw < 2026.3.12 - Insufficient Access Control in /config and /debug Endpoints8.7 High
- openclawOpenClaw < 2026.3.12 - Authorization Bypass via Misclassified Reaction Events in Feishu6.9 Medium
- openclawOpenClaw < 2026.3.11 - Authorization Bypass in Browser Profile Management via browser.request7.1 High
- openclawOpenClaw < 2026.3.12 - Weak Authorization via Mutable Group Names in Zalouser Allowlist6.9 Medium
- openclawOpenClaw < 2026.3.11 - Authorization Bypass in Discord Guild Reaction Allowlist Enforcement5.3 Medium
- forceu gokapiGokapi has Privilege Escalation in File Replace4.1 Medium
- openclawOpenClaw < 2026.3.11 - Unauthorized Session Reset via agent Slash Commands6.9 Medium
- openclawOpenClaw < 2026.3.11 - Approval Bypass via Unrecognized Script Runners9.4 Critical
- openclawOpenClaw < 2026.3.11 - Node-Host Approval UI Mismatch Allows Execution of Unintended Commands7.3 High
- openclawOpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Subagent Control Surface9.3 Critical
- jpadilla pyjwt, red hat openshift lightspeed, ai inference server +27 more +29 morePyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)7.5 High
- steveiliop56 tinyauthTinyauth's OIDC authorization codes are not bound to client on token exchange6.5 Medium
- Show moreLoading…