https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 21:45:55 +0000 https://cve.radiocsirt.org/vuln/cve-2026-69110 <p><strong>Affected:</strong> Microck opencode-studio</p> <p>OpenCode Studio before 2.4.4 contains a missing authentication vulnerability that allows unauthenticated remote attackers to read arbitrary files within the temp and static/music directories by directly accessing the GET /api/tmp/:tmpFile and GET /api/music/:fileName endpoints. Attackers can retrieve intermediate audio, video artifacts, and subtitles belonging to other users&#39; jobs, and additionally delete any video by ID through the unauthenticated DELETE /api/short-video/:videoId endpoint.</p> <p><strong>Affected:</strong> Microck opencode-studio</p> <p>OpenCode Studio before 2.4.4 contains a missing authentication vulnerability that allows unauthenticated remote attackers to read arbitrary files within the temp and static/music directories by directly accessing the GET /api/tmp/:tmpFile and GET /api/music/:fileName endpoints. Attackers can retrieve intermediate audio, video artifacts, and subtitles belonging to other users&#39; jobs, and additionally delete any video by ID through the unauthenticated DELETE /api/short-video/:videoId endpoint.</p> https://cve.radiocsirt.org/vuln/cve-2026-69110