CVE-2026-77442

Ryot is a self-hosted personal tracking application. Prior to 10.4.0, the createOrUpdateUserIntegration GraphQL mutation in crates/services/user/src/integration_operations.rs allows a low-privileged authenticated user to supply another user's integrationId to create_or_update_user_integration() without an ownership check. SeaORM treats the supplied primary key as an update target, and the operation assigns the caller's user_id while replacing the targeted integration's provider_specifics and other configuration, which can transfer ownership, overwrite configuration, or disable the victim's integration. Exploitation requires obtaining the victim's non-brute-forceable integration id, and the vulnerable update does not disclose existing stored credential values. This issue is fixed in version 10.4.0.

• CWE-639
• CWE-862

• https://github.com/IgnisDa/ryot/commit/c4dffc68fc0aaf65b65c520d1d45d8da52ea8606
• https://github.com/IgnisDa/ryot/pull/1797
• https://github.com/IgnisDa/ryot/releases/tag/v10.4.0
• https://github.com/IgnisDa/ryot/security/advisories/GHSA-cjxv-jj8g-vfvj
• https://github.com/IgnisDa/ryot/security/advisories/GHSA-cjxv-jj8g-vfvj

Published

Nov 6, 2026

Last Modified

Nov 12, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-77426Unleash is an open-source feature management platform. Prior…7.1
• CVE-2026-77427FileRise is a self-hosted web-based file manager with multi-…5.9
• CVE-2026-7743A vulnerability has been found in CodeAstro Online Classroom…6.3
• CVE-2026-77438Trilium is an open-source hierarchical note-taking applicati…7.5
• CVE-2026-77439Immich is a self-hosted photo and video management solution.…8.8
• CVE-2026-7744A vulnerability was found in CodeAstro Online Classroom 1.0.…6.3
• CVE-2026-7745A vulnerability was determined in CodeAstro Online Classroom…6.3
• CVE-2026-77454Incorrect Authorization vulnerability in ash-project ash_sql…5.9
• CVE-2026-77459Argo CD is a declarative, GitOps continuous delivery tool fo…9.9
• CVE-2026-7746A vulnerability was identified in SourceCodester Web-based P…6.3
• CVE-2026-77460EspoCRM is an open source customer relationship management a…6.5
• CVE-2026-77463Remark42 is a self-hosted comment engine for blogs, articles…6.5