CVE-2026-127086
Ryot before 10.5.6 Authorization Bypass via createOrUpdateCollection updateId
CVSS Score
6.3
EPSS Score
0.0%
EPSS Percentile
0th
Ryot before 10.5.6 contains an authorization bypass vulnerability that allows authenticated users to take over other users' collections by supplying an updateId to the createOrUpdateCollection GraphQL mutation. Attackers who know a collection id can trigger ownership reassignment without checks, read its items, rewrite metadata, and evict the original owner and collaborators.
| CWE | CWE-639 |
| Vendor | ignisda |
| Product | ryot |
| Published | Nov 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for ignisda ryot
Be the first to know when new medium vulnerabilities affecting ignisda ryot are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low
Affected Versions
IgnisDa / ryot
0 < 10.5.6
References
github.com: https://github.com/IgnisDa/ryot/security/advisories/GHSA-9v6w-g6x6-p4m5 github.com: https://github.com/IgnisDa/ryot/commit/822cc6701b46aedbc436abbf02e7efb94afd5f05 github.com: https://github.com/IgnisDa/ryot/releases/tag/v10.5.6 github.com: https://github.com/IgnisDa/ryot/blob/v10.5.5/crates/utils/dependent/collection/src/lib.rs#L137-L200 vulncheck.com: https://www.vulncheck.com/advisories/ryot-before-10.5.6-authorization-bypass-via-createorupdatecollection-updateid
Credits
Sandipkumar sah