CVE-2026-76910

Unleash is an open-source feature management platform. Prior to 8.0.3, cloneFeatureToggle and POST /api/admin/projects/:projectId/features/:featureName/clone authorize creation in the destination project but do not verify access to the source project. Because feature names are globally unique, a user with create or clone permission in one project who knows or guesses another project's feature name can copy that feature into the authorized project and inspect its strategy parameters, constraints, variants, and variant payloads. This issue is fixed in version 8.0.3.

• CWE-639

• https://github.com/Unleash/unleash/commit/2dc6ac0e8ba524ec7a2e9bc96a0e01d9d6f5a35a
• https://github.com/Unleash/unleash/releases/tag/v8.0.3
• https://github.com/Unleash/unleash/security/advisories/GHSA-8xcj-9hfr-fh9j
• https://github.com/Unleash/unleash/security/advisories/GHSA-8xcj-9hfr-fh9j

Published

Sep 22, 2026

Last Modified

Sep 23, 2026

Status

Awaiting Analysis

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-76902CordysCRM is an open source AI-powered customer relationship…5
• CVE-2026-76904GeoTools is an open source Java library that provides tools …9.8
• CVE-2026-76905kin-openapi is a Go project for handling OpenAPI files. From…7.5
• CVE-2026-76907LaSuite Doc is a collaborative note taking, wiki and documen…6.5
• CVE-2026-76909Unleash is an open-source feature management platform. Prior…2.1
• CVE-2026-7691A security vulnerability has been detected in Wavlink WL-WN5…6.3
• CVE-2026-76917Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to…5.5
• CVE-2026-76918SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to …5.5
• CVE-2026-76919ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to …7.5
• CVE-2026-7692A vulnerability was detected in Wavlink WL-WN570HA1 R70HA1 V…6.3
• CVE-2026-769203gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0…5.5
• CVE-2026-76921CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to …5.5