Skip to content
OpenAdvisories

Vendor

vitodeploy

1 known vulnerabilities.

Products

vito 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2026-29789

    Vito: Cross-project privilege escalation in workflow site-creation actions allows unauthorized server modification

    Vito is a self-hosted web application that helps manage servers and deploy PHP applications into production servers. Prior to version 3.20.3, a missing authorization check in workflow site-creation actions allows an authenticated attacker with workflow write …

    vitodeploy vito