CVE-2026-111684
Magistrala through 1.0.0 Cross-Tenant Authorization Bypass in Certs Service
CVSS Score
8.3
EPSS Score
0.0%
EPSS Percentile
0th
Magistrala through 1.0.0 contains an authorization bypass vulnerability that allows authenticated workspace members to view, issue, and revoke other tenants' device certificates by supplying foreign serials or entity ids. Attackers can call RevokeBySerial, RevokeAll, ViewCert, ListCerts, or IssueCert under their own workspace path to disconnect other tenants' devices, disclose certificates, and mint CA-signed certificates for their device ids.
| CWE | CWE-639 |
| Vendor | absmach |
| Product | magistrala |
| Published | Oct 16, 2026 |
Stay Ahead of the Next One
Get instant alerts for absmach magistrala
Be the first to know when new high vulnerabilities affecting absmach magistrala are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
High
Availability
High
Affected Versions
absmach / magistrala
0 ≤ 1.0.0
References
hackmd.io: https://hackmd.io/@hieuPenguinnn/magistrala-certs-missing-workspace-scope-cross-tenant github.com: https://github.com/absmach/magistrala/blob/v1.0.0/certs/service.go#L136-L180 github.com: https://github.com/absmach/magistrala/blob/v1.0.0/certs/middleware/authorization.go#L97-L110 github.com: https://github.com/absmach/magistrala vulncheck.com: https://www.vulncheck.com/advisories/magistrala-through-1.0.0-cross-tenant-authorization-bypass-in-certs-service
Credits
hieuPenguinnn