VU#382143: Lowcoder Query Library API contains cross-tenant authorization bypass allowing for data exfiltration
Imported from official source
Lowcoder, version 2.4.10, contains an authorization bypass vulnerability in its Query Library feature’s API. Authenticated users with an admin or dev role can access private library-query data from other organizations within a multi-tenant Lowcoder instance. …
This version
- Version
- 1 of 1
- Recorded
- October 13, 2026 20:00
- Change
- Initial
- Content hash
c2e3f2aa6c429af3589ec4be5db61bab- All versions
- Revision history