CVE-2026-26012

vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Prior to 1.35.3, a regular organization member can retrieve all ciphers within an organization, regardless of collection permissions. The endpoint /ciphers/organization-details is accessible to any organization member and internally uses Cipher::find_by_org to retrieve all ciphers. These ciphers are returned with CipherSyncType::Organization without enforcing collection-level access control. This vulnerability is fixed in 1.35.3.

• CWE-863

• https://github.com/dani-garcia/vaultwarden/releases/tag/1.35.3Product, Release Notes
• https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-h265-g7rm-h337Vendor Advisory

Published

Feb 11, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-26007cryptography is a package designed to expose cryptographic p…6.5
• CVE-2026-26008EVerest is an EV charging software stack. Versions prior to …7.5
• CVE-2026-26009Catalyst is a platform built for enterprise game server host…9.9
• CVE-2026-2601GitLab has remediated an issue in GitLab EE affecting all ve…4.3
• CVE-2026-26010OpenMetadata is a unified metadata platform. Prior to 1.11.8…7.6
• CVE-2026-26011navigation2 is a ROS 2 Navigation Framework and System. In 1…9.8
• CVE-2026-26013LangChain is a framework for building agents and LLM-powered…3.7
• CVE-2026-26014Pion DTLS is a Go implementation of Datagram Transport Layer…5.9
• CVE-2026-26015DocsGPT is a GPT-powered chat for documentation. From versio…9.8
• CVE-2026-26016Wings is the server control plane for Pterodactyl, a free, o…8.1
• CVE-2026-26017CoreDNS is a DNS server that chains plugins. Prior to versio…6.3
• CVE-2026-26018CoreDNS is a DNS server that chains plugins. Prior to versio…7.5