Skip to content

CVE record · 1 source

CVE-2026-108855

CVSS 5.4

UnicomAI Wanwu through 0.6.5 contains a missing authorization vulnerability that allows any authenticated enabled user to revoke other users' AppKeys…

CVSS: 5.4

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

3

CVE NVD 20d ago

UnicomAI Wanwu through 0.6.5 contains a missing authorization vulnerability that allows any authenticated enabled user to revoke other users' AppKeys…

UnicomAI Wanwu through 0.6.5 contains a missing authorization vulnerability that allows any authenticated enabled user to revoke other users' AppKeys for arbitrary apps via the unpublish endpoint. Attackers can supply a target…

CVSS 5.4 CVE-2026-108855