CWE-863: Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
Also known as AuthZ.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- mervinpraison praisonaiPraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining8.8 High
- mervinpraison praisonaiPraisonAI AgentLoop onToolCall approval runs after tool execution8.8 High
- mervinpraison praisonaiPraisonAI SandboxExecutor allowedCommands bypass via shell chaining8.8 High
- mervinpraison praisonaiPraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validation8.2 High
- mervinpraison praisonaiPraisonAI Code agent tools fail open without a workspace boundary7.3 High
- mervinpraison praisonai, praisonaiagents +1 morePraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass9.8 Critical
- mervinpraison praisonaiPraisonAI: Compute-bridged file tools allow shell command injection8.8 High
- mervinpraison praisonaiPraisonAI recipe.run_stream skips dangerous-tool policy enforcement7.8 High
- mervinpraison praisonaiPraisonAI Slack app_mention bypasses configured user/channel authorization8.3 High
- mervinpraison praisonaiPraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvals8.8 High
- zitadelZITADEL: Missing client_id binding in OIDC authorization code exchange and refresh token flows (RFC 6749 Section 4.1.3 violation)7.4 High
- microsoft .net, .net 10.0 runtime, .net 8.0 runtime +6 more +8 more.NET Security Feature Bypass Vulnerability8.2 High
- microsoft .net, .net 10.0 runtime, .net 8.0 runtime +6 more +8 moreASP.NET Core Elevation of Privilege Vulnerability8.8 High
- sonatype nexus repository managerNexus Repository Manager - Incorrect Authorization allows credential disclosure via proxy repository configuration5.9 Medium
- avo-hq avoAvo: Missing Authorization in Avo Association Attach Endpoint Allows Unauthorized Relationship Manipulation and Privilege Escalation9.6 Critical
- projectcapsule capsuleCapsule: Incomplete fix of CVE-2026-30963: singular/plural typo leaves namespaces/finalize unprotected5.7 Medium
- gitea open source git serverPublic-only tokens bypass private-resource restrictions on `/api/v1/user` self routes8.1 High
- gitea open source git serverGitea organization forks can expose organization secrets without create permission8.1 High
- daytonaio daytonaDaytona: Cross-tenant data leak in notification WebSocket gateway via unverified organizationId join6.5 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Any authenticated user can read other users' private notes via Socket.IO5.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Authenticated users can target arbitrary configured Ollama backends via unguarded url_idx path parameter6.3 Medium
- traefikTraefik: Kubernetes Gateway crossProviderNamespaces bypass allows HTTPRoute outside the allowlist to expose internal Traefik services6.0 Medium
- n8nn8n - Incorrect OAuth Scope Validation in Evaluation Test Runs Endpoints5.3 Medium
- containerdcontainerd CRI checkpoint restore CDI annotation smuggling8.4 High
- cozy vision sms alert order notificationsWordPress SMS Alert Order Notifications plugin <= 3.9.4 - Privilege Escalation vulnerability9.8 Critical
- apache dolphinschedulerApache DolphinScheduler: The `/v2` experimental interface lacks permission checks9.1 Critical
- apache dolphinschedulerApache DolphinScheduler: Incorrect Authorization vulnerability allows users to access workflow instance information belonging to projects they do not have permission to access.6.5 Medium
- apache dolphinschedulerApache DolphinScheduler: Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in unauthorized projects4.9 Medium
- apache dolphinschedulerApache DolphinScheduler: DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure9.8 Critical
- google chromeInappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.155 allowed a...4.3 Medium
- gitea open source git serverGitea repository archive downloads bypass token scope checks9.1 Critical
- gitea open source git serverGitea maintainer-edit permissions allow unauthorized commits to readable repositories8.5 High
- gitea open source git serverGitea Basic Auth bypasses OAuth2 access token scopes8.1 High
- gitea open source git serverGitea Git smart HTTP bypasses repository token scopes for bearer tokens8.1 High
- n8nn8n: Credential Exfiltration via Permission Bypass8.5 High
- n8nn8n - Authorization Bypass in Public API Execution Retry Endpoint5.3 Medium
- gitroomhq postiz-appPostiz has cross-tenant SUPERADMIN takeover via Skool-provider JWT forgery9.9 Critical
- daytonaio daytonaDaytona: Public sandbox previews remain accessible for up to one hour after being made private7.0 High
- langchain langgraph-sdk, langchain-ai, langchain-ai langchain-sdk +2 moreLangGraph SDK has unsafe URL path construction4.2 Medium
- denoDeno: process.loadEnvFile() bypasses env permission checks and mutates process.env with only read access5.2 Medium
- n8nn8n - Incorrect OAuth Scope Validation in Workflow Test Run Endpoint5.3 Medium
- openclawOpenClaw < 2026.5.7 - Sender Policy Bypass via Mutable Conversation Identifiers in BlueBubbles2.3 Low
- openclawOpenClaw < 2026.4.2 - Shell Positional Parameters Bypass in Inline-Eval Checks7.6 High
- openclawOpenClaw < 2026.4.25 - Privilege Escalation via ownerAllowFrom Wildcard Inheritance in Internal/Webchat Commands6.0 Medium
- openclawOpenClaw < 2026.5.12 - Argument Pattern Bypass in Exec Allowlist via Linux and macOS7.6 High
- openclawOpenClaw < 2026.5.26 - Node Token Revocation Bypass via Pairing-Scoped Device Session8.7 High
- rometheme rtmkitRTMKit <= 2.0.7 - Authenticated (Contributor+) Missing Authorization to Arbitrary Form Submission Access via 'entries_id' Parameter6.5 Medium
- nestjs nestNest: Middleware Bypass on Fastify via Trailing Slash8.7 High
- sensiolabs symfony, symfony security-http +1 moreSymfony: Security Firewall Bypass via failure_forward Subrequest: Unauthenticated Access to access_control-Protected GET Routes8.7 High
- mastodonMastodon has a consent-check bypass in its remote Collections7.5 High
- Show moreLoading…