CVE-2026-16753

UNKNOWN 0.0

CVE-2026-16753

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and including 2.4.10, allows an authenticated administrator or developer in one organization to execute a library query belonging to another organization via a crafted request containing the victim library-query identifier.

Vendor	lowcoder
Product	lowcoder
Published	Oct 13, 2026
Last Updated	Oct 13, 2026

Stay Ahead of the Next One

Get instant alerts for lowcoder lowcoder

Be the first to know when new unknown vulnerabilities affecting lowcoder lowcoder are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Lowcoder / Lowcoder

2.1.0 ≤ 2.4.10

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/lowcoder-org/lowcoder kb.cert.org: https://www.kb.cert.org/vuls/id/382143