Filtered by vendor Looplj
Subscriptions
Filtered by product Axonhub
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-119599 | 1 Looplj | 1 Axonhub | 2026-10-30 | 4.3 Medium |
| AxonHub through 1.0.0-beta11 contains a privilege escalation vulnerability that allows project users to assign system-level scopes by creating service_account API keys with unvalidated scopes. Attackers holding write_api_keys can mint keys with read_channels and query /admin/graphql to read every channel's configuration, including base URLs and model lists. | ||||
Page 1 of 1.