CVE-2026-121734
ZaneOps 1.14.0 before 1.15.2 Cross-Workspace Information Disclosure via ReviewPreviewEnvDeployAPIView
CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
0th
ZaneOps 1.14.0 before 1.15.2 contains an authorization bypass vulnerability that allows any workspace administrator to read another workspace's pending preview environment by querying ReviewPreviewEnvDeployAPIView without project scoping. Attackers can use the project slug and environment name from public fork pull request comments to retrieve plaintext environment variables and preview basic-auth credentials.
| CWE | CWE-639 |
| Vendor | zane-ops |
| Product | zane-ops |
| Published | Nov 3, 2026 |
Stay Ahead of the Next One
Get instant alerts for zane-ops zane-ops
Be the first to know when new medium vulnerabilities affecting zane-ops zane-ops are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
zane-ops / zane-ops
1.14.0 < 1.15.2
References
github.com: https://github.com/zane-ops/zane-ops/commit/0f3e30403a605dc155a664bc70722c74159a6494 github.com: https://github.com/zane-ops/zane-ops github.com: https://github.com/zane-ops/zane-ops/security/advisories/GHSA-r87v-8542-wx9q github.com: https://github.com/zane-ops/zane-ops/blob/v1.15.1/backend/zane_api/views/environments.py#L246-L248 github.com: https://github.com/zane-ops/zane-ops/releases/tag/v1.15.2 vulncheck.com: https://www.vulncheck.com/advisories/zaneops-1.14.0-before-1.15.2-cross-workspace-information-disclosure-via-reviewpreviewenvdeployapiview
Credits
hieuPenguinnn Fredkiss3