Read the docs
TI-2024-18521 Aliases CVE-2024-27916GHSA-v627-69v2-xx37

Improper authorization in stacklok minder

Priority MEDIUM 64CWE-285Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
Low · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-285.

Summary

Minder is a software supply chain security platform. Prior to version 0.0.33, a Minder user can use the endpoints `GetRepositoryByName`, `DeleteRepositoryByName`, and `GetArtifactByName` to access any repository in the database, irrespective of who owns the repo and any permissions present. The database query checks by repo owner, repo name and provider name (which is always `github`). These query values are not distinct for the particular user - as long as the user has valid credentials and a provider, they can set the repo owner/name to any value they want and the server will return information on this repo. Version 0.0.33 contains a patch for this issue.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00666 52nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed minder (stacklok): 0.0.33github.com/stacklok/minder (Go): 0.0.33

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
stacklokminderbefore 0.0.330.0.33Patch availableCNA
—github.com/stacklok/minder (Go)before 0.0.330.0.33Patch availableGHSA-v627-69v2-xx37
  • minder Vendorstacklok Affected before 0.0.33 Fixed in 0.0.33 Patch available CNA
  • github.com/stacklok/minder (Go) Vendor— Affected before 0.0.33 Fixed in 0.0.33 Patch available GHSA-v627-69v2-xx37

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:lfprojects:minder:*:*:*:*:*:go:*:*before 0.0.33VulnerableMLflow
  • cpe:2.3:a:lfprojects:minder:*:*:*:*:*:go:*:* Versions before 0.0.33 Vulnerable ·MLflow

Remediation

  • Fix · CNA minder (stacklok) Fixed in 0.0.33
  • Fix · GHSA-v627-69v2-xx37 github.com/stacklok/minder (Go) Fixed in 0.0.33 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-27916
  2. 2026-10-03 Alias added: GHSA-v627-69v2-xx37

References

Exploit 1

Patch 1

Advisory 1

Other 3

  • TI-2026-41912 ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement CVSS 3.1HIGH 8.8
  • TI-2024-22541 Minder's Github Webhook Handler vulnerable to denial of service from un-validated requests CVSS 3.1HIGH 7.5
  • TI-2026-41911 ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) CVSS 3.1MEDIUM 4.7
  • TI-2024-25220 Denial of service from maliciously configured Git repository in Minder CVSS 3.1MEDIUM 5.7
  • TI-2024-23307 Denial of service of Minder Server from maliciously crafted GitHub attestations CVSS 3.1MEDIUM 5.3
  • TI-2024-23266 Stacklok Minder vulnerable to denial of service from maliciously crafted templates CVSS 3.1MEDIUM 5.3
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences