High severity8.3NVD Advisory· Published Sep 2, 2026· Updated Sep 2, 2026
CVE-2026-45730
CVE-2026-45730
Description
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.0, there is a vulnerability in Nuclio Dashboard's project management API, allowing any authenticated user (without membership in the target project) to bypass OPA authorization checks on write paths (PUT /api/projects/{id}, DELETE /api/projects) and modify or delete any project along with all its associated resources (functions, API gateways, etc.). This issue has been patched in version 1.16.0.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/nuclio/nuclioGo | < 0.0.0-20260513101907-1915cd26d514 | 0.0.0-20260513101907-1915cd26d514 |
Affected products
3- ghsa-coords2 versionspkg:golang/github.com/nuclio/nucliopkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Leap%2016.0
< 0.0.0-20260513101907-1915cd26d514+ 1 more
- (no CPE)range: < 0.0.0-20260513101907-1915cd26d514
- (no CPE)range: < 0.0.20260723T184607-160000.1.1
Patches
Vulnerability mechanics
References
5News mentions
0No linked articles in our index yet.