TI-2026-40931 CVE-2026-56767 · GHSA-44p3-ph5c-h5h3
Maxun < 0.0.42 - Cross-Tenant IDOR in Storage and Webhook API Handlers
Priority MEDIUM 41
Maxun before 0.0.42 contains a cross-tenant insecure direct object reference vulnerability in storage and webhook API handlers that allows authenticated users to access other users' robots and OAuth tokens.