VYPR

console

by Phasehq

CVEs (1)

  • CVE-2026-110210MedOct 13, 2026
    risk 0.34cvss 5.3epss —

    Phase Console through 2.77.3 contains a missing authorization vulnerability that allows organisation members without Secrets read permission to read secret history via the secretHistory GraphQL query. Attackers holding an environment key can supply a known secret identifier to…