01 Record

CVE-2026-55489

BigBlueButton: IDOR on BBB through /api/graphql via POST parameter "presentationId" leads to Authentication Bypass

MediumPUBLISHEDCNA: GitHub_M

Base score4.9 CVSS v3.xCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L

02 Description

BigBlueButton: IDOR on BBB through /api/graphql via POST parameter "presentationId" leads to Authentication Bypass

Published

2026-08-20 21:36Z1 DAY AGO

Last updated

2026-08-21 11:23Z14 HR AGO

Reserved

2026-06-16

Assigning CNA

GitHub_M

Record state

PUBLISHED

Severity

Medium (CVSS 4.9)

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L

Weaknesses

SSVC decision

ExploitationnoneAutomatablenoTechnical Impactpartial

Data version

5.2

Document digest

a0b57886aa264816da3e7da7f12bc2bcaacbe34e572398d5dc1059ef8d57fbc7

VendorProductVersionsPlatforms

bigbluebuttonbigbluebutton< 3.0.29—