Auth bypass in Escriptorium
CVE-2026-18258
Authorization bypass in the Line, LineTranscription, VirtualCollection, tag and process API endpoints in Scripta/eScriptorium through 26.04.1 allows a remote authenticated user to read, modify and delete other users' transcription content via primary keys supplied in the request body, which are queried against the global model manager instead of the request-scoped queryset
Vulnerability class: IDOR (Insecure Direct Object Reference)
EPSS: 0.003 (24.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Escriptorium
- Scripta Escriptorium — versions 0
Weakness classification (CWE)
References
- cve@gitlab.com (Permissions Required)
Frequently asked questions
- What is CVE-2026-18258?
- CVE-2026-18258 is a high-severity vulnerability in Escriptorium, classified under Authorization Bypass Through User-Controlled Key. CVSS score: 8.8/10. Published 2026-08-06.
- How severe is CVE-2026-18258?
- High severity. CVSS v3 base score is 8.8 out of 10.