Skip to content
OpenAdvisories

Vendor

meteroid-oss

2 known vulnerabilities.

Products

Meteroid 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.0
    CVE-2026-125752

    Meteroid before 2.2.0 Cross-Tenant Authorization Bypass via UpdateCouponStatus

    Meteroid before 2.2.0 contains a cross-tenant authorization bypass vulnerability in the CouponsService UpdateCouponStatus gRPC handler, whose UPDATE query filters only on coupon id and ignores tenant ID. Authenticated users with catalog:manage or a tenant-sco…

    meteroid-oss Meteroid