Vulnerabilities

TI-2026-85663 CVE-2026-110802

DOM-based XSS in Altair iframe sandbox runs attacker-supplied scripts

LOW 27

Altair is a GraphQL client for all platforms.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00221 Published 2026-11-05 Fixed in 8.5.8 CWE-79

TI-2024-36262 CVE-2024-54147

HIGH 65

Altair is a GraphQL client for all platforms.

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.00184 Published 2024-12-09 Fixed in 8.0.5 CWE-295

TI-2023-23490 CVE-2023-43799

HIGH 67

Altair is a GraphQL Client.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00217 Published 2023-10-04 Fixed in 5.2.5 CWE-20