Skip to content
OpenAdvisories

Vendor

odysseus-dev

2 known vulnerabilities.

Products

odysseus 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-70619

    Odysseus Missing Admin Authorization via Embedding Endpoint Routes

    Odysseus before commit bf325f6 contains a missing authorization vulnerability that allows authenticated non-admin users to manage server-wide embedding backend configuration by invoking endpoint management routes that verify session authentication but omit th…

    odysseus-dev odysseus