CWE-863: Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
Also known as AuthZ.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- openwebui open webui, open-webui +1 moreOpen WebUI: Global Knowledge Base Enumeration via knowledge-bases Meta-Collection4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Channel Access Grants Bypass filter_allowed_access_grants5.4 Medium
- sovity dataspace-portalData Space Portal: Incorrect Authorization and Client-Side Enforcement of Server-Side Security in ghcr.io/sovity/ds-portal-ce-backend10.0 Critical
- openwebui open webui, open-webui +1 moreOpen WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access8.1 High
- linux, linux kernel +1 moreBluetooth: SMP: force responder MITM requirements before building the pairing response8.8 High
- apache cloudstackApache CloudStack: Any user can list backups that they should not have access to6.5 Medium
web-auth/webauthn-frameworkPackagistWebauthn has a User Verification Downgrade via Default-Open ClientOverridePolicy2.1 Low- freescout-help-desk freescoutFreeScout IDOR Vulnerability: PERM_EDIT_USERS allows modifying any user's notification subscriptions (incomplete fix of CVE-2025-48472)5.4 Medium
- ellite wallosWallos: Shared local webhook allowlist lets low-privilege users send arbitrary requests to allowlisted internal services6.0 Medium
- patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 morevm2: NodeVM builtin allowlist bypass via `module` builtin's `Module._load` allows sandbox escape9.9 Critical
- etcdetcd: Read access via PrevKv in etcd transactions may bypass RBAC authorization checks0.0 None
- suse rancher, rancher fleet +1 moreHelm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering9.9 Critical
org.opensearch.plugin:opensearch-securityMavenOpenSearch Security plugin: DLS not applied on documents linked by has_child or has_parent relation5.3 Mediumorg.opensearch.plugin:opensearch-securityMavenOpenSearch vulnerable to improper authorization for Rollover Requests2.2 Loworg.opensearch.plugin:opensearch-securityMavenOpenSearch has a bypass of REST Layer Authorization Using Malformed Paths3.7 Low- openstack cyborgOpenStack Cyborg uses rule:allow (check_str='@') as the default policy for multiple API endpoints7.4 High
github.com/getaxonflow/axonflowGoAxonflow fixed bugs by implementing multi-tenant isolation and access-control hardening9.1 Critical- @backstage plugin-catalog-backend-module-unprocessed, plugin-catalog-unprocessed-entities, plugin-catalog-unprocessed-entities-common +3 more +5 moreBackstage: Catalog unprocessed read endpoints allow authenticated cross-owner data access without permission checks4.3 Medium
- hatchetHatchet: Cross-tenant information disclosure in `listTasksByDAGIds`5.3 Medium
- thorsten phpmyfaqphpMyFAQ - Unauthenticated Information Disclosure via getIdFromSolutionId Permission Bypass8.7 High
- thorsten phpmyfaqphpMyFAQ - Insufficient Authorization Check in Admin API Endpoints5.3 Medium
- thorsten phpmyfaqphpMyFAQ - Authorization Bypass in Admin Pages via Non-Terminating Permission Check7.1 High
- wger-project wgerwger: cross-tenant password reset and plaintext disclosure via gym=None bypass9.9 Critical
- kimaiKimai before 2.56.0 Authorization Bypass via TimesheetVoter9.3 Critical
- auth0 auth0.jsImproper Permission Checking in Auth.js SDK7.1 High
- rapid7 velociraptorHTTP Filestore Endpoints Misapply Permissions Across Organizations6.8 Medium
- arcadedata arcadedbArcadeDB: Cross-database authorization bypass and unsecured newly-created databases9.0 Critical
- getgrav gravGrav: Sensitive Information Disclosure via Accounts Service Bypass6.5 Medium
- getgrav grav-plugin-apigrav-plugin-api: Grav API Privilege Escalation to Super Admin8.8 High
rustfscrates.ioRustFS: ListServiceAccount authorizes against wrong admin action, enabling cross-user enumeration and root service account takeover7.4 High- oxyno-zeta s3-proxyoxyno-zeta/s3-proxy: Security Issues in Resource Path Matching9.4 Critical
- pyload, pyload-ng project pyload-ng +1 morepyload-ng: non-admin SETTINGS users can redirect all outbound traffic through an attacker-controlled proxy8.3 High
- pyload, pyload-ng project pyload-ng +1 morepyload-ng: non-admin SETTINGS users can disable outbound TLS peer verification6.8 Medium
- pelicanplatform pelicanPrivilege Escalation Attack affecting Pelican Web UI9.0 Critical
- distributionDistribution: Tag deletion bypasses `storage.delete.enabled` configuration6.3 Medium
- argoproj argo workflows, argo-workflows, red hat openshift ai (rhoai) +2 moreArgo Workflows has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure8.1 High
- 0xjacky nginx-ui, nginxui nginx ui +1 morenginx-ui: Authenticated settings disclosure exposes node.secret and enables trusted-node authentication abuse, backup exfiltration, and restore-based nginx-ui state rollback6.5 Medium
- quarkus, red hat cryostat 4 on rhel 9, hawtio hawtio 4.4.0 +16 more +18 moreQuarkus authorization bypass via semicolon path normalization inconsistency8.8 High
- qualcomm qca7005 firmware, qualcomm, inc. snapdragon +1 moreIncorrect authorization in PLC FW9.6 Critical
- apache polarisApache Polaris: No protection on `write.metadata.path`9.4 Critical
- linuxcontainers lxclxc lxc-user-nic insufficient ownership validation allows cross-tenant OVS port deletion4.3 Medium
- prosodyAn issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when...6.5 Medium
- openstack keystone, red hat openstack platform 13 (queens), openstack platform 16.2 +3 more +5 moreOpenStack Keystone has an Incorrect Authorization Issue7.9 High
- getkirby kirbyKirby: `pages.access/list` and `files.access/list` permissions are not consistently checked in the REST API and changes dialog7.1 High
- @clerk backend, nextjs, shared +31 more +33 moreClerk: Authorization bypass when combining organization, billing, or reverification checks7.6 High
- ckanCKAN: Unauthenticated Authorization Bypass in `datastore_search_sql`6.7 Medium
- ckanCKAN: Unauthenticated SQL Injection and Authorization Bypass in `datastore_search_sql`8.3 High
- admidioAdmidio: Inverted 2FA Reset Authorization Check Lets Group Leaders Strip Admin TOTP7.1 High
- admidioAdmidio: Cross-Organization Member Data Exposure via Permission Check Mismatch in contacts_data.php4.9 Medium
- openclawOpenClaw < 2026.4.21 - Authorization Bypass in Owner-Enforced Commands via Wildcard Channel Senders2.3 Low
- Show moreLoading…