https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-14T15:47:52.376326+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-110118 fkie_cve-2026-110118 2026-10-14T15:47:52.393906+00:00

WorkFlow-Engine through 9.6.11 contains a missing authorization vulnerability that allows authenticated users to complete or reassign other users' workflow tasks via /vue/buttonOperation endpoints. Low-privileged attackers can supply a known taskId to the complete, completeTask or reAssign handlers to approve tasks or reassign them without authority.

 https://db.gcve.eu/vuln/ghsa-j9qx-hx2v-8q9m GHSA-j9qx-hx2v-8q9m 2026-10-14T15:47:52.393980+00:00

WorkFlow-Engine through 9.6.11 contains a missing authorization vulnerability that allows authenticated users to complete or reassign other users' workflow tasks via /vue/buttonOperation endpoints. Low-privileged attackers can supply a known taskId to the complete, completeTask or reAssign handlers to approve tasks or reassign them without authority.