CVE-2026-111695

7.1High

Published 16 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash

7.1High

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None
Impact: High impact on confidentiality
Weakness: CWE-639

Impact

Authenticated workspace members can access, modify, or delete other workspaces' datasources and exfiltrate raw JDBC credentials. They only need standard workspace member access to exploit sequential datasource IDs via API endpoints.

Root cause

The application lacks workspace authorization checks on datasource API endpoints, allowing access to records solely by numeric ID.

Affected systems

Shaiwz data-platform-open through commit efeacd3

CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Fix & remediation

No fixed release is currently published; patch DataSourceController.java and DataSourceServiceImpl.java to validate that the requesting user's workspace owns the target datasource ID, or restrict network access to the API.

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

Shaiwz data-platform-open through commit efeacd3 contains an insecure direct object reference vulnerability that allows authenticated workspace members to access other workspaces' datasources by numeric id. Attackers can send foreign sequential ids to /datasource/detail, /listSchemaTable, /tableDetail, /update or /delete to obtain JDBC credentials, enumerate database schemas, and modify or delete datasources.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-111695