CVE-2026-44595

MEDIUM 4.3

Yamcs: Unauthorized user enumeration via IAM API endpoints

CVSS Score

4.3

EPSS Score

0.0%

EPSS Percentile

0th

Yamcs is a mission control framework. Prior to 5.12.7, the IAM API endpoints listUsers, getUser, listGroups, and getGroup in yamcs-core did not enforce the required SystemPrivilege.ControlAccess check in yamcs-core/src/main/java/org/yamcs/http/api/IamApi.java, so any authenticated user, even one with low or no privileges, could enumerate all user accounts in the system including their usernames, superuser status, and group memberships. This issue is fixed in versions 5.12.7 and 5.13.0.

CWE	CWE-862
Vendor	yamcs
Product	yamcs
Published	Jul 16, 2026

Stay Ahead of the Next One

Get instant alerts for yamcs yamcs

Be the first to know when new medium vulnerabilities affecting yamcs yamcs are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Affected Versions

yamcs / yamcs

< 5.12.7

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/yamcs/yamcs/security/advisories/GHSA-p2rj-mrmc-9w29 github.com: https://github.com/yamcs/yamcs/commit/0e12b518f103f24681299318a30a460fe4327b88 github.com: https://github.com/yamcs/yamcs/commit/e90099fba98e96214217c195b6a5b87b5f46e51c github.com: https://github.com/yamcs/yamcs/releases/tag/yamcs-5.12.7 github.com: https://github.com/yamcs/yamcs/releases/tag/yamcs-5.13.0