Authorization bypass through user-controlled key in eLabFTW - #VU159633
Published: November 6, 2026
Vulnerability identifier: #VU159633
CSH Severity: Low
CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-639
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an authenticated attacker with low privileges to read another user's pending request actions in eLabFTW.
The vulnerability exists due to an authorization bypass through a user-controlled key when accessing pending request actions belonging to a different user. An authenticated attacker with low privileges can target another user's pending request actions and obtain their contents without requiring that user's interaction.
Affected software
eLabFTW
Remediation
Install security update from vendor's website.
eLabFTW - update to 6.0.0