Auth bypass in Misskey-dev Misskey
CVE-2026-48115
Misskey is an open source, federated social media platform. All Misskey servers running versions 2024.5.0 and later, but prior to 2026.5.4, contain a vulnerability in the Server Announcements API where insufficient permission checks allow…
Affected products
- Misskey-dev Misskey — versions >= 2024.5.0, < 2026.5.4
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)