TI-2026-71994 CVE-2026-110108 · GHSA-g49f-wwx4-j76v
MateCloud missing authorization lets authenticated users manage object storage
Priority LOW 37
MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage object storage by calling the unprotected /api/v1/admin/storage endpoints in StorageController.