TI-2026-75507 CVE-2026-111721 · GHSA-5ww9-qwj2-mr7g
Broken access control in Open WES exposes other warehouses' stock
Priority LOW 24
Open WES through 1.0.0 contains an authorization bypass vulnerability that allows authenticated users to modify other warehouses' stock records because GlobalGatewayFilter never enforces auth_warehouse scoping.