https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-17T03:00:54.687616+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-110764 fkie_cve-2026-110764 2026-10-17T03:00:54.705936+00:00

AstronRPA through 1.1.6 contains an insecure direct object reference vulnerability in the resource-service /file/download endpoint that allows authenticated users to download other tenants' files by supplying their fileId. Attackers can enumerate predictable time-ordered Snowflake file IDs, since FileMapper.getFile performs no owner or tenant check, to retrieve S3-stored files uploaded by other tenants.

 https://db.gcve.eu/vuln/ghsa-xg73-6f4x-27x7 GHSA-xg73-6f4x-27x7 2026-10-17T03:00:54.706007+00:00

AstronRPA through 1.1.6 contains an insecure direct object reference vulnerability in the resource-service /file/download endpoint that allows authenticated users to download other tenants' files by supplying their fileId. Attackers can enumerate predictable time-ordered Snowflake file IDs, since FileMapper.getFile performs no owner or tenant check, to retrieve S3-stored files uploaded by other tenants.