https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 07:52:46 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-322826 EUVD-2026-322826 https://cve.radiocsirt.org/vuln/euvd-2026-322826 https://cve.radiocsirt.org/vuln/fkie_cve-2026-45297 <p>OpenReplay is a self-hosted session replay suite. Prior to 1.26.0, there is a cross-tenant IDOR on feature-flag and assist-stats routes via {project_id} case mismatch. ProjectAuthorizer.__call__ (OSS api/auth/auth_project.py:14-38 and EE ee/api/auth/auth_project.py:14-46) only runs projects.is_authorized(project_id, tenant_id, user_id) + projects.get_project(tenant_id, project_id) when self.project_identifier == &#34;projectId&#34; (camelCase). For EE multi-tenant, feature-flag queries only filter on project_id, never tenant_id. Any authenticated user in tenant A can read/update/delete feature-flag rows belonging to tenant B by iterating the sequential integer project_id + feature_flag_id. OSS is single-tenant by design ({&#34;errors&#34;:[&#34;tenants already registered&#34;]} on second signup) so there&#39;s no cross-tenant impact This vulnerability is fixed in 1.26.0.</p> <p>OpenReplay is a self-hosted session replay suite. Prior to 1.26.0, there is a cross-tenant IDOR on feature-flag and assist-stats routes via {project_id} case mismatch. ProjectAuthorizer.__call__ (OSS api/auth/auth_project.py:14-38 and EE ee/api/auth/auth_project.py:14-46) only runs projects.is_authorized(project_id, tenant_id, user_id) + projects.get_project(tenant_id, project_id) when self.project_identifier == &#34;projectId&#34; (camelCase). For EE multi-tenant, feature-flag queries only filter on project_id, never tenant_id. Any authenticated user in tenant A can read/update/delete feature-flag rows belonging to tenant B by iterating the sequential integer project_id + feature_flag_id. OSS is single-tenant by design ({&#34;errors&#34;:[&#34;tenants already registered&#34;]} on second signup) so there&#39;s no cross-tenant impact This vulnerability is fixed in 1.26.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-45297