TI-2026-84855 CVE-2026-121734 · GHSA-wx9v-p2rq-5m8q
Authorization bypass in ZaneOps leaks other workspaces' environments
Priority MEDIUM 60
ZaneOps 1.14.0 before 1.15.2 contains an authorization bypass vulnerability that allows any workspace administrator to read another workspace's pending preview environment by querying ReviewPreviewEnvDeployAPIView withou…