CVE-2026-61836

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 12.0.0, when response caching is enabled, the cache-key derivation in api/src/utils/get-cache-key.ts includes version, path, query, and accountability.user but omits authorization context such as share, role, roles, admin, app, and policies. Directus share tokens and anonymous requests can both reduce to user null, so different shares or anonymous clients requesting the same URL and query can receive a permission-filtered cached response without permission re-evaluation. This issue is fixed in version 12.0.0.

• CWE-524
• CWE-639

• https://github.com/directus/directus/commit/7ba4efb97525d3af33570537c76e44baea767f13Patch
• https://github.com/directus/directus/pull/27707Issue Tracking, Patch
• https://github.com/directus/directus/releases/tag/v12.0.0Release Notes
• https://github.com/directus/directus/security/advisories/GHSA-c6w9-5g5j-jh2pVendor Advisory

Published

Jul 15, 2026

Last Modified

Jul 28, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-6181The Device Configuration Framework is vulnerable to an authe…5.9
• CVE-2026-6182A vulnerability was identified in code-projects Simple Conte…7.3
• CVE-2026-61828Nixpkgs is a collection of software packages that can be ins…8.5
• CVE-2026-61829Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2026-6183A security flaw has been discovered in code-projects Simple …7.3
• CVE-2026-61835Directus is a real-time API and App dashboard for managing S…7.7
• CVE-2026-61839Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2026-6184A weakness has been identified in code-projects Simple Conte…2.4
• CVE-2026-61841Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2026-61857ImageMagick before 7.1.2-26 contains a heap use-after-free v…7.5
• CVE-2026-61858ImageMagick before 7.1.2-26 contains a policy bypass vulnera…5.3
• CVE-2026-61859ImageMagick before 7.1.2-26 and 6.9.13-x before 6.9.13-51 co…4.8