CWE-863: Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
Also known as AuthZ.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- unknown rss aggregator by feedzyRSS Aggregator by Feedzy < 5.2.6 - Author+ Cross-User Import Job Manipulation and Post Deletion5.5 Medium
- aureus erpDolibarr ERP TakePOS invoice.php fail authorization5.3 Medium
- code-projects task management systemcode-projects Task Management System UpdateTaskStatus.php authorization6.9 Medium
- adobe genuine software integrity serviceAdobe Genuine Software Integrity Service | CWE-863 Incorrect Authorization4.0 Medium
- elated-themes frappeFrappe: Unrestricted access to Document Follow APIs2.3 Low
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Authorization Bypass in Repository Creation8.2 High
- elated-themes frappeFrappe: Field-level permission bypass via Document Follow5.3 Medium
- supertokensA lack of tenant separation in SuperTokens Inc. SuperTokens Core v6.0.0 to v11.4.0 allows an...5.9 Medium
- craftcms cmsCraft CMS before 5.10.6 Authorization Bypass via structures/move-element9.3 Critical
- elated-themes frappeFrappe Has Broken Access Control in its Workspace Save API5.1 Medium
- open-reception appointment-booking-softwareOpenReception's bootstrap booking flow allows unauthenticated booking on isPublic=false channels6.5 Medium
- open-reception appointment-booking-softwareOpenReception: Staff deletion removes pending invites cross-tenant by email match2.7 Low
- langchain-ai langgraph, langgraph-checkpoint-postgres, langgraph-checkpoint-sqlite +2 moreLangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores5.3 Medium
- unknown passsterContent Protector (Passster) < 4.3.7 - Contributor+ Protected Content Disclosure via Core REST API2.7 Low
- traefikTraefik: `allowCrossNamespace=false` bypass via `@kubernetescrd` TraefikService backendRef4.8 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 +2 more +4 moreUdisks2: udisks2: local privilege escalation via as-user option spoofing7.8 High
- apache polarisApache Polaris: register endpoint reads attacker-controlled storage location before allowed-locations validation5.3 Medium
- No product listedTinyAGI Message API Endpoint index.ts processMessage authorization6.9 Medium
- mf-yang openclaw-cnmf-yang openclaw-cn Ggateway Exec Approval Flow bash-tools.exec.ts authorization5.3 Medium
- cosmicstack-labs mercury-agentcosmicstack-labs mercury-agent bg agent.ts Agent.handleBgCommand authorization5.3 Medium
- zhayujie cowagentzhayujie CowAgent Self-Evolution Review Agent executor.py _select_tools authorization5.3 Medium
- @clerk nuxtNuxt route rules silently dropped for mixed-case paths, bypassing appMiddleware auth gates (incomplete fix for CVE-2026-53721)8.2 High
- amazon documentdb mcp server, aws documentdb-mcp-server +1 moreIncorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server5.7 Medium
- drupal edit in-place fieldEdit in-place field - Moderately critical - Access bypass - SA-CONTRIB-2026-0938.1 High
- apache answerApache Answer: Missing authorization in revision audit reject allows authenticated users to reject pending revisions6.5 Medium
- documensoDocumenso - Assistant Recipient Can Forge Another Signer's Signature in Sequential-Signing Documents6.5 Medium
- documize communityDocumize Community - Attachment Download Authorization Bypass via Non-Validated secure Token7.5 High
- openstack ironicIn OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can...5.0 Medium
- openstack swiftIn OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control...6.0 Medium
- openstack swiftIn OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz-*...6.0 Medium
- openstack neutronIn OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of...7.1 High
- No product listedOpen Library Foundation VuFind v11.0.3 and v4.1 is vulnerable to toInorrect Access Control. The...9.8 Critical
- openwebui open webui, open-webui +1 moreOpen WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolder8.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Unapproved accounts can open terminal sessions via a WebSocket auth path missing the role check6.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Deletion of directories and file embeddings in other knowledge bases via sync cleanup4.3 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI: Users denied the image-generation permission can still generate images via chat completions4.3 Medium
- zammadZammad: Missing authorization on ticket attachment download7.1 High
- zammadZammad 7.0.1 - Improper authorization in ticket article attachment cloning7.1 High
- flowiseai flowiseFlowise: Cross-Workspace OAuth2 Credential Metadata Leak7.6 High
- flowiseai flowiseFlowise: Cross-workspace credential IDOR in openai-assistants-vector-store7.1 High
- flowiseai flowiseFlowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure7.1 High
- flowiseai flowiseFlowise: `DELETE /api/v1/chatflows/:id` does not validate resource type, allowing `agentflows:delete` and `chatflows:delete` to delete each other’s flow type7.1 High
- samsung open source oneA vulnerability allowing a low-privileged user to retrieve report data outside the scope of a...5.3 Medium
- nousresearch hermes-agentNousResearch hermes-agent Quick run.py _check_slash_access authorization5.3 Medium
- eclipse miloIn Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed...8.7 High
- adobe campaign classic, campaign +1 moreAdobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)9.8 Critical
- apache nifiApache NiFi: Authorization Bypass for Parameter Context Asset Deletion2.3 Low
- apache nifiApache NiFi: Incorrect Authorization for Parameter Context Validation Requests7.7 High
- duckdb duckdb-awsDuckDB AWS Extension Security Policy Bypass via load_aws_credentials Procedure6.0 Medium
- eugeny russhRussh: Channel-scoped server callbacks can be reached without an open channel6.5 Medium
- Show moreLoading…