https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T12:40:07.512129+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-8999 CVE-2024-8999 — Improper Access Control in lunary-ai/lunary 2026-10-17T12:40:07.531521+00:00

Affected: lunary-ai/lunary

lunary-ai/lunary version v1.4.25 contains an improper access control vulnerability in the POST /api/v1/data-warehouse/bigquery endpoint. This vulnerability allows any user to export the entire database data by creating a stream to Google BigQuery without proper authentication or authorization. The issue is fixed in version 1.4.26.