CVE-2026-16753
CVE-2026-16753
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and including 2.4.10, allows an authenticated administrator or developer in one organization to execute a library query belonging to another organization via a crafted request containing the victim library-query identifier.
CVSS 8.8 · High · EPSS 0.4%
- Published
- Updated
Affected products and versions
lowcoder
- Versions
- ≥ 2.1.0, ≤ 2.4.10: Affected (custom)
No fix published