TI-2026-40932 CVE-2026-56768 · GHSA-w52g-25r7-3c46
Seahub < 13.0.23 - Authentication Bypass in ShareLinkZipTaskView GET Method
Priority MEDIUM 41
Seahub before 13.0.23 does not enforce SHARE_LINK_LOGIN_REQUIRED on GET /api/v2.1/share-link-zip-task/, allowing unauthenticated users to bypass authentication.