Search
Find a vulnerability
Search criteria
4 vulnerabilities found for Meteroid by meteroid-oss
CVE-2026-125752 (GCVE-0-2026-125752)
Vulnerability from nvd – Published: 2026-11-10 15:22 – Updated: 2026-11-10 19:04
VLAI
EPSS
VEX
Title
Meteroid before 2.2.0 Cross-Tenant Authorization Bypass via UpdateCouponStatus
Summary
Meteroid before 2.2.0 contains a cross-tenant authorization bypass vulnerability in the CouponsService UpdateCouponStatus gRPC handler, whose UPDATE query filters only on coupon id and ignores tenant ID. Authenticated users with catalog:manage or a tenant-scoped API key can supply another tenant's coupon ID to disable, archive, or re-enable that coupon and receive its details.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-10 18:19 UTC
CWE
- CWE-639 - Authorization Bypass Through User-Controlled Key
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://github.com/meteroid-oss/meteroid/commit/a… | patch |
| https://github.com/meteroid-oss/meteroid/releases… | release-notes |
| https://github.com/meteroid-oss/meteroid/blob/v2.… | technical-description |
| https://hackmd.io/@hieund/meteroid-cross-tenant-a… | third-party-advisory |
| https://www.vulncheck.com/advisories/meteroid-bef… | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| meteroid-oss | Meteroid |
Affected:
0 , < 2.2.0
(semver)
|
Date Public
2026-11-05 00:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-125752",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-10T18:19:07.866778Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T19:04:32.820Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageURL": "pkg:github/meteroid-oss/meteroid",
"product": "Meteroid",
"repo": "https://github.com/meteroid-oss/meteroid",
"vendor": "meteroid-oss",
"versions": [
{
"lessThan": "2.2.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "hieuPenguinnn"
}
],
"datePublic": "2026-11-05T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Meteroid before 2.2.0 contains a cross-tenant authorization bypass vulnerability in the CouponsService UpdateCouponStatus gRPC handler, whose UPDATE query filters only on coupon id and ignores tenant ID. Authenticated users with catalog:manage or a tenant-scoped API key can supply another tenant\u0027s coupon ID to disable, archive, or re-enable that coupon and receive its details."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 2.3,
"baseSeverity": "LOW",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "Authorization Bypass Through User-Controlled Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T15:22:47.954Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"tags": [
"patch"
],
"url": "https://github.com/meteroid-oss/meteroid/commit/ac3fe5c2bc72b277c5329e20eba384b8653805f2"
},
{
"name": "Meteroid v2.2.0 Release Notes",
"tags": [
"release-notes"
],
"url": "https://github.com/meteroid-oss/meteroid/releases/tag/v2.2.0"
},
{
"tags": [
"technical-description"
],
"url": "https://github.com/meteroid-oss/meteroid/blob/v2.1.0/modules/meteroid/crates/diesel-models/src/query/coupons.rs#L472-L486"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://hackmd.io/@hieund/meteroid-cross-tenant-apitoken-hash-and-coupon-status-idor"
},
{
"name": "VulnCheck Advisory: Meteroid before 2.2.0 Cross-Tenant Authorization Bypass via UpdateCouponStatus",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/meteroid-before-2.2.0-cross-tenant-authorization-bypass-via-updatecouponstatus"
}
],
"title": "Meteroid before 2.2.0 Cross-Tenant Authorization Bypass via UpdateCouponStatus",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-125752",
"datePublished": "2026-11-10T15:22:47.954Z",
"dateReserved": "2026-11-10T12:36:08.069Z",
"dateUpdated": "2026-11-10T19:04:32.820Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-125751 (GCVE-0-2026-125751)
Vulnerability from nvd – Published: 2026-11-10 15:22 – Updated: 2026-11-13 15:18
VLAI
EPSS
VEX
Title
Meteroid before 2.2.0 Cross-Tenant API Token Hash Disclosure via GetApiTokenById
Summary
Meteroid before 2.2.0 contains an authorization bypass vulnerability in the ApiTokensService GetApiTokenById gRPC handler that fails to apply the caller's tenant context. Authenticated users with settings:read permission can supply another tenant's API token ID to obtain its Argon2 secret hash and owning tenant ID.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-13 15:17 UTC
CWE
- CWE-639 - Authorization Bypass Through User-Controlled Key
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://github.com/meteroid-oss/meteroid/commit/a… | patch |
| https://github.com/meteroid-oss/meteroid/releases… | release-notes |
| https://github.com/meteroid-oss/meteroid/blob/v2.… | technical-description |
| https://hackmd.io/@hieund/meteroid-cross-tenant-a… | third-party-advisory |
| https://www.vulncheck.com/advisories/meteroid-bef… | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| meteroid-oss | Meteroid |
Affected:
0 , < 2.2.0
(semver)
|
Date Public
2026-11-05 00:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-125751",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-13T15:17:34.583365Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-13T15:18:00.883Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://hackmd.io/@hieund/meteroid-cross-tenant-apitoken-hash-and-coupon-status-idor"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageURL": "pkg:github/meteroid-oss/meteroid",
"product": "Meteroid",
"repo": "https://github.com/meteroid-oss/meteroid",
"vendor": "meteroid-oss",
"versions": [
{
"lessThan": "2.2.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "hieuPenguinnn"
}
],
"datePublic": "2026-11-05T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Meteroid before 2.2.0 contains an authorization bypass vulnerability in the ApiTokensService GetApiTokenById gRPC handler that fails to apply the caller\u0027s tenant context. Authenticated users with settings:read permission can supply another tenant\u0027s API token ID to obtain its Argon2 secret hash and owning tenant ID."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 2.3,
"baseSeverity": "LOW",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "Authorization Bypass Through User-Controlled Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T15:22:47.272Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"tags": [
"patch"
],
"url": "https://github.com/meteroid-oss/meteroid/commit/ac3fe5c2bc72b277c5329e20eba384b8653805f2"
},
{
"name": "Meteroid v2.2.0 Release Notes",
"tags": [
"release-notes"
],
"url": "https://github.com/meteroid-oss/meteroid/releases/tag/v2.2.0"
},
{
"tags": [
"technical-description"
],
"url": "https://github.com/meteroid-oss/meteroid/blob/v2.1.0/modules/meteroid/crates/meteroid-api/src/apitokens/service.rs#L78-L101"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://hackmd.io/@hieund/meteroid-cross-tenant-apitoken-hash-and-coupon-status-idor"
},
{
"name": "VulnCheck Advisory: Meteroid before 2.2.0 Cross-Tenant API Token Hash Disclosure via GetApiTokenById",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/meteroid-before-2.2.0-cross-tenant-api-token-hash-disclosure-via-getapitokenbyid"
}
],
"title": "Meteroid before 2.2.0 Cross-Tenant API Token Hash Disclosure via GetApiTokenById",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-125751",
"datePublished": "2026-11-10T15:22:47.272Z",
"dateReserved": "2026-11-10T12:36:07.711Z",
"dateUpdated": "2026-11-13T15:18:00.883Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-125752 (GCVE-0-2026-125752)
Vulnerability from cvelistv5 – Published: 2026-11-10 15:22 – Updated: 2026-11-10 19:04
VLAI
EPSS
VEX
Title
Meteroid before 2.2.0 Cross-Tenant Authorization Bypass via UpdateCouponStatus
Summary
Meteroid before 2.2.0 contains a cross-tenant authorization bypass vulnerability in the CouponsService UpdateCouponStatus gRPC handler, whose UPDATE query filters only on coupon id and ignores tenant ID. Authenticated users with catalog:manage or a tenant-scoped API key can supply another tenant's coupon ID to disable, archive, or re-enable that coupon and receive its details.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-10 18:19 UTC
CWE
- CWE-639 - Authorization Bypass Through User-Controlled Key
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://github.com/meteroid-oss/meteroid/commit/a… | patch |
| https://github.com/meteroid-oss/meteroid/releases… | release-notes |
| https://github.com/meteroid-oss/meteroid/blob/v2.… | technical-description |
| https://hackmd.io/@hieund/meteroid-cross-tenant-a… | third-party-advisory |
| https://www.vulncheck.com/advisories/meteroid-bef… | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| meteroid-oss | Meteroid |
Affected:
0 , < 2.2.0
(semver)
|
Date Public
2026-11-05 00:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-125752",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-10T18:19:07.866778Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T19:04:32.820Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageURL": "pkg:github/meteroid-oss/meteroid",
"product": "Meteroid",
"repo": "https://github.com/meteroid-oss/meteroid",
"vendor": "meteroid-oss",
"versions": [
{
"lessThan": "2.2.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "hieuPenguinnn"
}
],
"datePublic": "2026-11-05T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Meteroid before 2.2.0 contains a cross-tenant authorization bypass vulnerability in the CouponsService UpdateCouponStatus gRPC handler, whose UPDATE query filters only on coupon id and ignores tenant ID. Authenticated users with catalog:manage or a tenant-scoped API key can supply another tenant\u0027s coupon ID to disable, archive, or re-enable that coupon and receive its details."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 2.3,
"baseSeverity": "LOW",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "Authorization Bypass Through User-Controlled Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T15:22:47.954Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"tags": [
"patch"
],
"url": "https://github.com/meteroid-oss/meteroid/commit/ac3fe5c2bc72b277c5329e20eba384b8653805f2"
},
{
"name": "Meteroid v2.2.0 Release Notes",
"tags": [
"release-notes"
],
"url": "https://github.com/meteroid-oss/meteroid/releases/tag/v2.2.0"
},
{
"tags": [
"technical-description"
],
"url": "https://github.com/meteroid-oss/meteroid/blob/v2.1.0/modules/meteroid/crates/diesel-models/src/query/coupons.rs#L472-L486"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://hackmd.io/@hieund/meteroid-cross-tenant-apitoken-hash-and-coupon-status-idor"
},
{
"name": "VulnCheck Advisory: Meteroid before 2.2.0 Cross-Tenant Authorization Bypass via UpdateCouponStatus",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/meteroid-before-2.2.0-cross-tenant-authorization-bypass-via-updatecouponstatus"
}
],
"title": "Meteroid before 2.2.0 Cross-Tenant Authorization Bypass via UpdateCouponStatus",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-125752",
"datePublished": "2026-11-10T15:22:47.954Z",
"dateReserved": "2026-11-10T12:36:08.069Z",
"dateUpdated": "2026-11-10T19:04:32.820Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-125751 (GCVE-0-2026-125751)
Vulnerability from cvelistv5 – Published: 2026-11-10 15:22 – Updated: 2026-11-13 15:18
VLAI
EPSS
VEX
Title
Meteroid before 2.2.0 Cross-Tenant API Token Hash Disclosure via GetApiTokenById
Summary
Meteroid before 2.2.0 contains an authorization bypass vulnerability in the ApiTokensService GetApiTokenById gRPC handler that fails to apply the caller's tenant context. Authenticated users with settings:read permission can supply another tenant's API token ID to obtain its Argon2 secret hash and owning tenant ID.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-13 15:17 UTC
CWE
- CWE-639 - Authorization Bypass Through User-Controlled Key
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://github.com/meteroid-oss/meteroid/commit/a… | patch |
| https://github.com/meteroid-oss/meteroid/releases… | release-notes |
| https://github.com/meteroid-oss/meteroid/blob/v2.… | technical-description |
| https://hackmd.io/@hieund/meteroid-cross-tenant-a… | third-party-advisory |
| https://www.vulncheck.com/advisories/meteroid-bef… | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| meteroid-oss | Meteroid |
Affected:
0 , < 2.2.0
(semver)
|
Date Public
2026-11-05 00:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-125751",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-13T15:17:34.583365Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-13T15:18:00.883Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://hackmd.io/@hieund/meteroid-cross-tenant-apitoken-hash-and-coupon-status-idor"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageURL": "pkg:github/meteroid-oss/meteroid",
"product": "Meteroid",
"repo": "https://github.com/meteroid-oss/meteroid",
"vendor": "meteroid-oss",
"versions": [
{
"lessThan": "2.2.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "hieuPenguinnn"
}
],
"datePublic": "2026-11-05T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Meteroid before 2.2.0 contains an authorization bypass vulnerability in the ApiTokensService GetApiTokenById gRPC handler that fails to apply the caller\u0027s tenant context. Authenticated users with settings:read permission can supply another tenant\u0027s API token ID to obtain its Argon2 secret hash and owning tenant ID."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 2.3,
"baseSeverity": "LOW",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-639",
"description": "Authorization Bypass Through User-Controlled Key",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-10T15:22:47.272Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"tags": [
"patch"
],
"url": "https://github.com/meteroid-oss/meteroid/commit/ac3fe5c2bc72b277c5329e20eba384b8653805f2"
},
{
"name": "Meteroid v2.2.0 Release Notes",
"tags": [
"release-notes"
],
"url": "https://github.com/meteroid-oss/meteroid/releases/tag/v2.2.0"
},
{
"tags": [
"technical-description"
],
"url": "https://github.com/meteroid-oss/meteroid/blob/v2.1.0/modules/meteroid/crates/meteroid-api/src/apitokens/service.rs#L78-L101"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://hackmd.io/@hieund/meteroid-cross-tenant-apitoken-hash-and-coupon-status-idor"
},
{
"name": "VulnCheck Advisory: Meteroid before 2.2.0 Cross-Tenant API Token Hash Disclosure via GetApiTokenById",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/meteroid-before-2.2.0-cross-tenant-api-token-hash-disclosure-via-getapitokenbyid"
}
],
"title": "Meteroid before 2.2.0 Cross-Tenant API Token Hash Disclosure via GetApiTokenById",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-125751",
"datePublished": "2026-11-10T15:22:47.272Z",
"dateReserved": "2026-11-10T12:36:07.711Z",
"dateUpdated": "2026-11-13T15:18:00.883Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}