CVE-2026-83805

Nautobot is a Network Source of Truth and Network Automation Platform. From 3.0.0 until 3.1.8, the generic ApprovalWorkflowStageResponse create endpoint does not enforce approver-group membership, change permission on the object under review, or the one-response-per-user restriction applied by the intended approve and deny actions. A user with only extras.add_approvalworkflowstageresponse can submit approved responses directly, while writable user and state fields permit responses to be attributed to arbitrary users. These forged responses can satisfy min_approvers, approve the workflow, and activate its gated ScheduledJob without a legitimate approver. This issue is fixed in version 3.1.8.

• CWE-285
• CWE-639

• https://github.com/nautobot/nautobot/commit/8682707d0391cbfd7694e3276127b78dc9cf29d8
• https://github.com/nautobot/nautobot/releases/tag/v3.1.8
• https://github.com/nautobot/nautobot/security/advisories/GHSA-q4c5-2j6f-r476

Published

Sep 22, 2026

Last Modified

Sep 23, 2026

Status

Awaiting Analysis

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-83772A vulnerability was detected in Cobham SATCOM VSAT7090 Marit…9.9
• CVE-2026-8378The Frontend File Manager Plugin WordPress plugin through 23…5.4
• CVE-2026-8379The Frontend File Manager Plugin WordPress plugin through 23…7.5
• CVE-2026-8380The Frontend File Manager Plugin WordPress plugin through 23…6.5
• CVE-2026-83801Nautobot is a Network Source of Truth and Network Automation…5.4
• CVE-2026-83803Sentry is an error tracking and performance monitoring tool.…7.7
• CVE-2026-8381A broken access control vulnerability exists in the TeamView…5.4
• CVE-2026-8382The Advanced Custom Fields (ACF®) plugin for WordPress is vu…5.3
• CVE-2026-8383The LearnPress WordPress plugin before 4.3.7 does not gate …5.3
• CVE-2026-8384In Eclipse Jetty, an HTTP URI of this form: /public;/..…5.3
• CVE-2026-8385The WP Go Maps WordPress plugin before 10.0.10 does not pro…5.3
• CVE-2026-8386The WP Go Maps WordPress plugin before 10.0.10 does not per…5.3