CVE-2026-24791

HIGH CVSS: 8.1 Published: 2026-08-13 Modified: 2026-08-13

Description

Public-only tokens bypass private-resource restrictions on `/api/v1/user` self routes

Affected Platforms

Unknown

Weakness Type

CWE-863

References