Unrated severityNVD Advisory· Published Oct 27, 2026

CVE-2026-118171

Description

The strapi/content-manager package is missing content-scope authorization in the content manager preview URL endpoint. This allows low-privileged admins to generate preview URLs without knowing document identifiers or holding read permissions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Strapi/content-managerllm-create
Strapi/Strapillm-fuzzy

Patches

Vulnerability mechanics

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000