https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T04:12:11.466360+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-6582 CVE-2024-6582 — Broken Access Control in lunary-ai/lunary 2026-10-09T04:12:11.483094+00:00

Affected: lunary-ai/lunary, lunary-ai\/lunary

A broken access control vulnerability exists in the latest version of lunary-ai/lunary. The `saml.ts` file allows a user from one organization to update the Identity Provider (IDP) settings and view the SSO metadata of another organization. This vulnerability can lead to unauthorized access and potential account takeover if the email of a user in the target organization is known.