Unrated severityNVD Advisory· Published Jul 13, 2026· Updated Jul 13, 2026
will-moss Isaiah Master Websocket server.go Server.Handle authorization
CVE-2026-15541
Description
A flaw has been found in will-moss Isaiah up to 1.36.9. The impacted element is the function Server.Handle of the file app/server/server/server.go of the component Master Websocket Handler. Executing a manipulation of the argument Agent can lead to missing authorization. It is possible to launch the attack remotely. The pull request to fix this issue awaits acceptance.
Affected products
1Patches
Vulnerability mechanics
References
6- github.com/will-moss/isaiah/pull/35mitreissue-trackingpatch
- vuldb.com/cve/CVE-2026-15541mitrethird-party-advisory
- vuldb.com/submit/855074mitrethird-party-advisory
- github.com/will-moss/isaiah/issues/34mitreissue-tracking
- vuldb.com/vuln/377891mitrevdb-entrytechnical-description
- vuldb.com/vuln/377891/ctimitresignaturepermissions-required
News mentions
0No linked articles in our index yet.