VYPR

axonhub

by Looplj

CVEs (1)

  • CVE-2026-119599MedOct 30, 2026
    risk 0.21cvss 4.3epss 0.00

    AxonHub through 1.0.0-beta11 contains a privilege escalation vulnerability that allows project users to assign system-level scopes by creating service_account API keys with unvalidated scopes. Attackers holding write_api_keys can mint keys with read_channels and query…