Skip to content
OpenAdvisories

Product · data-infra

cube-studio

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-111672

    Cube-studio through 2026.09.01 IDOR via Pipeline View and Copy Endpoints

    Cube-studio through 2026.09.01 contains a missing authorization vulnerability in myapp/views/view_pipeline.py that allows authenticated users to view or copy other project groups' pipelines by id. Attackers can enumerate sequential pipeline ids via the web, l…

    data-infra cube-studio