Skip to content
OpenAdvisories

Vendor

LingGuoAI

2 known vulnerabilities.

Products

LingGuo-Drama 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-111723

    LingGuo-Drama through commit 8a6924a Broken Access Control via /admin/v1/admins API

    LingGuo-Drama through commit 8a6924a contains a missing authorization vulnerability that allows any registered user to manage all accounts through the /admin/v1/admins API protected only by AuthAdminJWT. Attackers can self-register, read every account's bcryp…

    LingGuoAI LingGuo-Drama
  • High 8.1
    CVE-2026-111722

    LingGuo-Drama through commit 8a6924a IDOR via /admin/v1/projects/:id API

    LingGuo-Drama through commit 8a6924a contains an insecure direct object reference vulnerability that allows registered users to access other users' projects because projects.Get lacks an owner check. Self-registered attackers can iterate numeric IDs via GET, …

    LingGuoAI LingGuo-Drama