CVE-2026-55545

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs WebSocket subscription handlers fail to enforce the privileges required by equivalent REST endpoints. PacketsApi.subscribePackets exposes the packets WebSocket topic without ObjectPrivilegeType.ReadPacket, ProcessingApi.subscribeAlgorithmStatus exposes the algorithm-status WebSocket topic without ObjectPrivilegeType.ReadAlgorithm, and MdbOverrideApi.subscribeMdbChanges exposes the mdb-changes WebSocket topic without SystemPrivilege.GetMissionDatabase. A low-privilege authenticated user can receive telemetry packets, algorithm status, and mission database change information outside the assigned authorization scope. This issue is fixed in versions 5.12.8 and 5.13.2.

• CWE-862

• https://github.com/yamcs/yamcs/commit/0691731846c5a0aca81b88fabbd2cd51d56fe076
• https://github.com/yamcs/yamcs/commit/12864af555e6ca4941b01c1f1217859cc0492ce0
• https://github.com/yamcs/yamcs/releases/tag/yamcs-5.12.8
• https://github.com/yamcs/yamcs/releases/tag/yamcs-5.13.2
• https://github.com/yamcs/yamcs/security/advisories/GHSA-fwww-cp23-7f5g

Published

Aug 28, 2026

Last Modified

Sep 8, 2026

Status

Awaiting Analysis

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-55539PraisonAI is a multi-agent teams system. Prior to praisonai …8.6
• CVE-2026-5554A security flaw has been discovered in code-projects Concert…7.3
• CVE-2026-55540PraisonAI is a multi-agent teams system. Prior to praisonai …7.1
• CVE-2026-55541PraisonAI is a multi-agent teams system. Prior to praisonai …8.8
• CVE-2026-55542Snipe-IT is an IT asset/license management system. Prior to …4.3
• CVE-2026-55544NextCRM is open-source customer relationship management (CRM…7.6
• CVE-2026-55546QWED-MCP is a deterministic verification gateway for MCP. Pr…9.8
• CVE-2026-55547Yamcs is a mission control framework. Prior to 5.12.8 and 5.…4.3
• CVE-2026-55548Yamcs is a mission control framework. Prior to 5.12.8 and 5.…4.3
• CVE-2026-55549Yamcs is a mission control framework. Prior to 5.9.4, Yamcs …6.5
• CVE-2026-5555A weakness has been identified in code-projects Concert Tick…7.3
• CVE-2026-55550NextCRM is open-source customer relationship management (CRM…7.1