Skip to content
OpenAdvisories

Vendor

Vearch

1 known vulnerabilities.

Products

vearch 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-108746

    Vearch 3.5.2 through 3.5.9 Incorrect Authorization via Role.HasPermissionForResources

    Vearch 3.5.2 through 3.5.9 contains an incorrect authorization vulnerability in Role.HasPermissionForResources that ignores stored ReadOnly or None privilege levels for resources listed in a role. Authenticated non-root users can upsert and delete documents w…

    Vearch vearch