Unicomai Wanwu
4 CVEs affecting Unicomai Wanwu. Latest disclosed: 2026-10-11. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-108853 | High | 8.1 | 2026-10-11 | UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to delete other tenants'… |
CVE-2026-108855 | Medium | 5.4 | 2026-10-11 | UnicomAI Wanwu through 0.6.5 contains a missing authorization vulnerability that allows any authenticated enabled user to revoke other users' AppKeys for arbit… |
CVE-2026-108854 | Medium | 5.4 | 2026-10-11 | Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows any authenticated enabled user to delete other users' legacy AppKeys… |
CVE-2026-108856 | Medium | 4.2 | 2026-10-11 | UnicomAI Wanwu through 0.6.5 contains an authorization bypass vulnerability that allows authenticated users to mint AppKeys bound to other users' MCP servers v… |