Skip to content
OpenAdvisories

Product · hcengineering

Huly Platform

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-111606

    Huly Platform through 0.7.432 Account Takeover via mergeSpecifiedPersons RPC

    Huly Platform through 0.7.432 contains a missing authorization vulnerability that allows any authenticated user to merge arbitrary persons by calling the mergeSpecifiedPersons account RPC. Attackers knowing two person UUIDs can graft attacker-controlled unver…

    hcengineering Huly Platform