Skip to content
EXPLOIT
.CC
CVEs
Search
About
synced 43 MIN AGO
T-43M
01
Record
STATE: —
02
Description
SRC: CNA
03
Metadata
SCHEMA: CVE JSON 5
04
Affected products
PAIRS: —
05
References
REFS: —
01
Record
STATE: PUBLISHED
CVE-2026-77768
OpenPanel report.get Returns Any Report by Identifier Without Checking Project Access
High
PUBLISHED
CNA: VulnCheck
Base score
7.1
CVSS v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
View raw JSON
CVE Program record
02
Description
CNA: VulnCheck
OpenPanel report.get Returns Any Report by Identifier Without Checking Project Access
03
Metadata
SCHEMA: 5.2
Published
2026-08-21 11:05Z
14 HR AGO
Last updated
2026-08-21 17:31Z
8 HR AGO
Reserved
2026-08-21
Assigning CNA
VulnCheck
Record state
PUBLISHED
Severity
High (CVSS 7.1)
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Weaknesses
CWE-639
Authorization Bypass Through User-Controlled Key
Base
SSVC decision
Exploitation
poc
Automatable
no
Technical Impact
partial
Data version
5.2
Document digest
38ceaae0b37b28a946b6f4d7e2d6bd5337d698fab0c750cb5ed8b06cfcd6c2c4
04
Affected products
PAIRS: 1
Vendor
Product
Versions
Platforms
Openpanel-dev
openpanel
0 to < 0a51b6805eed0b3da8376175acd5fa3d26819cb6
—
05
References
REFS: 5
github.com
GHSA-9x7c-f87x-2243
https://github.com/Openpanel-dev/openpanel/security/advisories/GHSA-9x7c-f87x-2243
vendor-advisory
github.com
report.get returning getReportById unchecked
https://github.com/Openpanel-dev/openpanel/blob/e8a0602cda5a4d4b463f11d298a1b078c446bf33/packages/trpc/src/routers/report.ts
technical-description
github.com
fix: improve access rights
https://github.com/Openpanel-dev/openpanel/commit/0a51b6805eed0b3da8376175acd5fa3d26819cb6
patch
github.com
https://github.com/Openpanel-dev/openpanel
product
www.vulncheck.com
VulnCheck Advisory: OpenPanel report.get Returns Any Report by Identifier Without Checking Project Access
https://www.vulncheck.com/advisories/openpanel-report-get-returns-any-report-by-identifier-without-checking-project-access
third-party-advisory