CVE-2026-85076

Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.124, an authenticated non-admin with run_events, create_events, or edit_events privilege can supply undeclared keys in event params through api_create_event, api_update_event, or api_run_event. lib/api.js and lib/api/event.js validate the parameter object without restricting its keys, and lib/job.js uppercases those keys and applies them to the child process environment after administrator-defined plugin variables. A key that collides with a security-sensitive environment variable can therefore override the plugin execution context and may cause privilege escalation, arbitrary code execution, data access, or service disruption depending on the plugin and runtime. This issue is fixed in version 0.9.124.

• CWE-74
• CWE-863

• https://github.com/jhuckaby/Cronicle/commit/da0228fdea9bc57c09876c00ea0feda70a0ef110
• https://github.com/jhuckaby/Cronicle/releases/tag/v0.9.124
• https://github.com/jhuckaby/Cronicle/security/advisories/GHSA-9w42-v8cj-68gq

Published

Nov 5, 2026

Last Modified

Nov 5, 2026

Status

Received

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-85057ZITADEL is an open source identity management platform. From…8.7
• CVE-2026-85058Moquette is a lightweight Java MQTT broker. Prior to 0.18.1,…7.5
• CVE-2026-85061MapLibre GL JS is an interactive vector tile map library for…10
• CVE-2026-85062Colord is a tiny yet powerful tool for high-performance colo…6.9
• CVE-2026-85063node-csv is a full-featured CSV parser with a simple API tha…6.9
• CVE-2026-8507Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl have o…9.8
• CVE-2026-85077Sanic is an opensource python web server/framework. Prior to…8.2
• CVE-2026-85078Sanic is an opensource python web server/framework. In versi…6.5
• CVE-2026-85079In EmberZNet 9.1.1 and earlier, a malformed Simple_Desc_req …9.8
• CVE-2026-8508An improper authentication vulnerability in the "social_logi…6.5
• CVE-2026-85080In EmberZNet 9.1.1 and earlier, a malformed GetGroupMembersh…9.1
• CVE-2026-85081The File Manager WordPress plugin before 8.0.5, FileOrganize…7.5