Auth bypass in Elixir-grpc Grpc

CVE-2026-48599

Authorization Bypass Through User-Controlled Key vulnerability in elixir-grpc grpc allows authenticated attackers to access or modify resources belonging to other users by smuggling a conflicting value for any path-bound field via the quer…

Vulnerability class: IDOR (Insecure Direct Object Reference)

EPSS: 0.003 (19.5th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References