TI-2026-86086 CVE-2026-124026 · GHSA-4rpj-w8fh-483q
Incorrect authorization in Bar Assistant lets users copy private recipes
Priority LOW 24
Bar Assistant 6.0.0-rc1 before 6.11.0 contains an incorrect authorization vulnerability in CocktailController::copy that allows registered users to bypass source cocktail membership checks.