CVE-2026-119599: falha de média gravidade em looplj AxonHub
AxonHub through 1.0.0-beta11 Privilege Escalation via Service Account API Key Scopes
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.4%
AxonHub through 1.0.0-beta11 contains a privilege escalation vulnerability that allows project users to assign system-level scopes by creating service_account API keys with unvalidated scopes. Attackers holding write_api_keys can mint keys with read_channels and query /admin/graphql to read every channel's configuration, including base URLs and model lists.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
looplj · AxonHubReferências
https://github.com/looplj/axonhubhttps://github.com/looplj/axonhub/blob/v1.0.0-beta11/internal/server/biz/api_key.go#L340https://github.com/looplj/axonhub/blob/v1.0.0-beta11/internal/server/biz/api_key.go#L448https://github.com/looplj/axonhub/commit/e5c904efbdabd80d74827dfae478330339c5a514https://github.com/looplj/axonhub/issues/2724https://github.com/looplj/axonhub/pull/2741https://hackmd.io/@hieuPenguinnn/axonhub-apikey-scope-grant-privilege-escalationhttps://www.vulncheck.com/advisories/axonhub-through-1.0.0-beta11-privilege-escalation-via-service-account-api-key-scopes