Skip to content
OpenAdvisories

Vendor

Posit Software, PBC

2 known vulnerabilities.

Products

Posit Workbench 2 RStudio Server 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.7
    CVE-2026-121880

    RStudio Server / Posit Workbench localhost port-proxy does not enforce per-session port ownership

    Authorization bypass through user-controlled key in the localhost port-proxy (/p/<token>/) in Posit Software, PBC RStudio Server and Posit Workbench before 2026.08.0 allows remote authenticated users to reach web applications and other services bound to 127.0…

    Posit Software, PBC Posit Workbench RStudio Server
  • Medium 5.7
    CVE-2026-121881

    Posit Workbench code-server session-state RPC (get_last_seen) SQL injection

    SQL injection vulnerability in the get_last_seen code-server session-state RPC in Posit Software, PBC Posit Workbench before 2026.08.0 allows authenticated users to read arbitrary data from the Workbench database via the sessionIds parameter. NOTE: exploitati…

    Posit Software, PBC Posit Workbench