Skip to content
OpenAdvisories

Vendor

StackStorm

2 known vulnerabilities.

Products

st2 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-85514

    StackStorm st2 API Key auth.py privileges management

    A security vulnerability has been detected in StackStorm st2 up to 3.9.0. Impacted is an unknown function of the file st2api/st2api/controllers/v1/auth.py of the component API Key Handler. Such manipulation of the argument api_key_api.user leads to improper p…

    StackStorm st2
  • Medium 6.3
    CVE-2026-85513

    StackStorm st2 NoOp RBAC backend actionexecutions.py privileges management

    A weakness has been identified in StackStorm st2 up to 3.9.0. This issue affects the function assert_user_is_admin_if_user_query_param_is_provided of the file st2api/st2api/controllers/v1/actionexecutions.py of the component NoOp RBAC backend. This manipulati…

    StackStorm st2