Skip to content
OpenAdvisories

Product · maykinmedia

open-object

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-82411

    Objects API: Cross-object-type authorization bypass on the object history-detail endpoint

    Open Object provides an API and admin interface to manage objects and object types. From 2.4.3 until 2.5.1, 3.6.2, 4.0.2, and 4.1.1, a token scoped to read one ObjectType can read the full versioned record of an object of any other ObjectType via the history-…

    maykinmedia open-object