Skip to content
OpenAdvisories

Vendor

jitsucom

1 known vulnerabilities.

Products

jitsu 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.2
    CVE-2026-115509

    Jitsu Console before 2.14.0-beta.41 Cross-Workspace Authorization Bypass via sources/state API

    Jitsu console before 2.14.0-beta.41 contains an incorrect authorization vulnerability in sources/state.ts handlers that call findFirst without await, so the syncId ownership check never fails. Authenticated users knowing another workspace's sync ID can read, …

    jitsucom jitsu