CVE-2026-30920

OneUptime is a solution for monitoring and managing online services. Prior to 10.0.19, OneUptime's GitHub App callback trusts attacker-controlled state and installation_id values and updates Project.gitHubAppInstallationId with isRoot: true without validating that the caller is authorized for the target project. This allows an attacker to overwrite another project's GitHub App installation binding. Related GitHub endpoints also lack effective authorization, so a valid installation ID can be used to enumerate repositories and create CodeRepository records in an arbitrary project. This vulnerability is fixed in 10.0.19.

• CWE-345
• CWE-639
• CWE-862

• https://github.com/OneUptime/oneuptime/security/advisories/GHSA-656w-6f6c-m9r6Exploit, Vendor Advisory

Published

Mar 10, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-30914SFTPGo is an open source, event-driven file transfer solutio…8.1
• CVE-2026-30915SFTPGo is an open source, event-driven file transfer solutio…4.3
• CVE-2026-30916Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2026-30917Bucket is a MediaWiki extension to store and retrieve struct…8.8
• CVE-2026-30918facileManager is a modular suite of web apps built with the …6.1
• CVE-2026-30919facileManager is a modular suite of web apps built with the …5.4
• CVE-2026-30921OneUptime is a solution for monitoring and managing online s…9.9
• CVE-2026-30922pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3…7.5
• CVE-2026-30923ModSecurity is an open source, cross platform web applicatio…7.5
• CVE-2026-30924qui is a web interface for managing qBittorrent instances. V…9.6
• CVE-2026-30925Parse Server is an open source backend that can be deployed …7.5
• CVE-2026-30926SiYuan is a personal knowledge management system. Prior to 3…7.1