Open WebUI: Users denied the image-generation permission can still generate images via chat completions
CVE-2026-70484
## Summary An authenticated user whose `features.image_generation` permission has been revoked can still make the server
#cwe-863
共收录 2118 条相关情报。
← 返回所有主题Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could...
CVE-2026-48333
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege esca
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to g...
CVE-2026-48333
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege esca
Apache NiFi 2.0.0 through 2.10.0 support creating, reading, and deleting Assets associated with...
CVE-2026-68980
Apache NiFi 2.0.0 through 2.10.0 support creating, reading, and deleting Assets associated with Parameter Contexts throu
Authorization handling for Parameter Context validation requests in Apache NiFi 1.10.0 through 2...
CVE-2026-62354
Authorization handling for Parameter Context validation requests in Apache NiFi 1.10.0 through 2.10.0 allows clients wit
The DuckDB AWS extension for DuckDB contains a security policy bypass vulnerability that allows...
CVE-2026-58139
The DuckDB AWS extension for DuckDB contains a security policy bypass vulnerability that allows any database user with S
Chisel is a TCP/UDP tunnel, transported over HTTP and secured via SSH. In versions prior to 1.11.5, authenticated clients can bypass --authfile ACL restrictions and tunnel traff...
CVE-2026-48113
Chisel is a TCP/UDP tunnel, transported over HTTP and secured via SSH. In versions prior to 1.11.5, authenticated client
Apache NiFi 2.0.0 through 2.10.0 support creating, reading, and deleting Assets associated with Parameter Contexts through the REST API. The framework authorizes asset deletion ...
CVE-2026-68980
Apache NiFi 2.0.0 through 2.10.0 support creating, reading, and deleting Assets associated with Parameter Contexts throu
Authorization handling for Parameter Context validation requests in Apache NiFi 1.10.0 through 2.10.0 allows clients with read access to submit proposed Parameter values. The pr...
CVE-2026-62354
Authorization handling for Parameter Context validation requests in Apache NiFi 1.10.0 through 2.10.0 allows clients wit
The DuckDB AWS extension for DuckDB contains a security policy bypass vulnerability that allows any database user with SQL execution permissions to extract plaintext AWS credent...
CVE-2026-58139
The DuckDB AWS extension for DuckDB contains a security policy bypass vulnerability that allows any database user with S
Russh is a Rust SSH client & server library. Prior to 0.62.5, russh dispatches channel-scoped Handler callbacks for recipient channel IDs that were never opened or confirmed in ...
CVE-2026-68930
Russh is a Rust SSH client & server library. Prior to 0.62.5, russh dispatches channel-scoped Handler callbacks for reci
Russh: Channel-scoped server callbacks can be reached without an open channel
CVE-2026-68930
There is a server-side channel state issue in `russh`. After a client is authenticated, `russh` can dispatch channel-sc
The Simply Schedule Appointments WordPress plugin before 1.6.12.11 does not perform a capability check on an administrative appointment-listing shortcode, and its per-user resul...
CVE-2026-15254
The Simply Schedule Appointments WordPress plugin before 1.6.12.11 does not perform a capability check on an administrat
Vikunja versions 0.22.0 through 2.3.0 fail to validate the principal type in API token management...
CVE-2026-68581
Vikunja versions 0.22.0 through 2.3.0 fail to validate the principal type in API token management. Because user IDs and
Vikunja versions 0.22.0 through 2.3.0 fail to validate the principal type in API token management. Because user IDs and link-share IDs are independent numeric sequences and both...
CVE-2026-68581
Vikunja versions 0.22.0 through 2.3.0 fail to validate the principal type in API token management. Because user IDs and
Vikunja 0.22.0 through 2.3.0 Authentication Bypass via Principal ID Collision
CVE-2026-68581
Vikunja versions 0.22.0 through 2.3.0 fail to validate the principal type in API token management. Because user IDs and
Keycloak provides authorization services that allow administrators to restrict access to...
CVE-2026-18572
Keycloak provides authorization services that allow administrators to restrict access to resources based on time policie
Keycloak provides authorization services that allow administrators to restrict access to resources based on time policies (for example, only allowing access during business hour...
CVE-2026-18572
Keycloak provides authorization services that allow administrators to restrict access to resources based on time policie
ArcadeDB versions before 26.7.2 fail to enforce scripting authorization checks on the SQL DEFINE...
CVE-2026-67341
ArcadeDB versions before 26.7.2 fail to enforce scripting authorization checks on the SQL DEFINE FUNCTION statement with
OpenRemote (org.openremote:openremote) versions <= 1.26.2 contain an insecure direct object...
CVE-2026-67310
OpenRemote (org.openremote:openremote) versions <= 1.26.2 contain an insecure direct object reference vulnerability in t