CVE-2026-62927

UNKNOWN 0.0

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to address-space handlers after calculating authorization, allowing an anonymous or otherwise low-privileged client to execute a denied method by batching it with an allowed method.

CWE	CWE-863
Vendor	eclipse foundation
Product	eclipse milo
Published	Aug 4, 2026

Stay Ahead of the Next One

Get instant alerts for eclipse foundation eclipse milo

Be the first to know when new unknown vulnerabilities affecting eclipse foundation eclipse milo are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Eclipse Foundation / Eclipse Milo

1.0.0 < 1.1.5

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/eclipse-milo/milo/commit/59b50bed094de0d18a130a48f3527254dc76105d gitlab.eclipse.org: https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/598 gitlab.eclipse.org: https://gitlab.eclipse.org/security/cve-assignment/-/work_items/178

Credits

Abhinav Agarwal (GitHub: @abhinavagarwal07)