Skip to content
OpenAdvisories

Vendor

looplj

1 known vulnerabilities.

Products

AxonHub 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-119599

    AxonHub through 1.0.0-beta11 Privilege Escalation via Service Account API Key Scopes

    AxonHub through 1.0.0-beta11 contains a privilege escalation vulnerability that allows project users to assign system-level scopes by creating service_account API keys with unvalidated scopes. Attackers holding write_api_keys can mint keys with read_channels …

    looplj AxonHub