🔐 CVE Alert

CVE-2026-18275

MEDIUM 6.5

Authorization Bypass Through User-Controlled Key in eScriptorium

CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
0th

Authorization bypass in the process and annotation taxonomy serializers in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to run segmentation and transcription against other users' document parts, overwriting their content, via part primary keys supplied to a many=True related field whose queryset restriction was applied to the ManyRelatedField instead of its child_relation and therefore had no effect

CWE CWE-639
Vendor scripta
Product escriptorium
Published Aug 6, 2026
Stay Ahead of the Next One

Get instant alerts for scripta escriptorium

Be the first to know when new medium vulnerabilities affecting scripta escriptorium are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None

Affected Versions

Scripta / eScriptorium
0 ≤ 26.4.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗
gitlab.com: https://gitlab.com/scripta/escriptorium/-/work_items/1228

Credits

Thibault Clérice & Hassen Aguili