TI-2026-70087 CVE-2026-108110 · GHSA-33xm-96fg-7hfc
Authorization bypass in MOVO exposes other users' stored documents
Priority HIGH 68
MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document endpoints that allows authenticated users to access other users' stored objects by supplying arbitrary object paths.