Auth bypass in Elixir-grpc Grpc
CVE-2026-48599
Authorization Bypass Through User-Controlled Key vulnerability in elixir-grpc grpc allows authenticated attackers to access or modify resources belonging to other users by smuggling a conflicting value for any path-bound field via the quer…
Vulnerability class: IDOR (Insecure Direct Object Reference)
Affected products
- Elixir-grpc Grpc — versions 0.8.0, 8aaf3d3a8c4c7b08ac65e9c6f254e0d24da1d048
Weakness classification (CWE)
References
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related, vendor-advisory)
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related)
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (related)
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db (patch)