CVE-2026-111684

8.3High

Published 16 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash

8.3High

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None
Impact: High impact on integrity, availability
Weakness: CWE-639

Impact

Authenticated workspace members can forge, view, or revoke certificates for other tenants' devices by supplying foreign serials or entity IDs. This allows attackers to disconnect devices across tenant boundaries or mint valid CA-signed certificates under unauthorized IDs.

Root cause

The certs service authorization middleware fails to validate workspace-level tenant scoping when processing certificate management requests.

Affected systems

Magistrala through 1.0.0

CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

Fix & remediation

Upgrade Magistrala to a version newer than 1.0.0 once released. Until patched, restrict network access to the certs service API endpoints or revoke access for untrusted tenant workspace members.

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

Magistrala through 1.0.0 contains an authorization bypass vulnerability that allows authenticated workspace members to view, issue, and revoke other tenants' device certificates by supplying foreign serials or entity ids. Attackers can call RevokeBySerial, RevokeAll, ViewCert, ListCerts, or IssueCert under their own workspace path to disconnect other tenants' devices, disclose certificates, and mint CA-signed certificates for their device ids.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-111684