CVE-2026-110108

HIGH 8.1

MateCloud through 5.0.8 Missing Authorization via /api/v1/admin/storage API

CVSS Score

8.1

EPSS Score

0.0%

EPSS Percentile

0th

MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage object storage by calling the unprotected /api/v1/admin/storage endpoints in StorageController. Low-privilege or self-registered users can supply arbitrary bucket and objectName values to list objects, obtain pre-signed download URLs for other users' files, delete objects, and upload at chosen keys.

CWE	CWE-862
Vendor	mateaix
Product	matecloud
Published	Oct 13, 2026

Stay Ahead of the Next One

Get instant alerts for mateaix matecloud

Be the first to know when new high vulnerabilities affecting mateaix matecloud are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Affected Versions

mateaix / MateCloud

0 ≤ 5.0.8

References

NVD ↗ CVE.org ↗ EPSS Data ↗

hackmd.io: https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/matecloud-storage-admin-missing-authz github.com: https://github.com/mateaix/matecloud/blob/57b1edc0f0b8b964448e2d41ef7ba98751e71d8d/mate-biz/mate-system/src/main/java/vip/mate/system/admin/trigger/controller/StorageController.java#L45-L118 github.com: https://github.com/mateaix/matecloud/blob/57b1edc0f0b8b964448e2d41ef7ba98751e71d8d/mate-gateway/src/main/resources/application.yml#L80-L85 github.com: https://github.com/mateaix/matecloud vulncheck.com: https://www.vulncheck.com/advisories/matecloud-through-5.0.8-missing-authorization-via-api-v1-admin-storage-api

Credits

hieuPenguinnn