Security Advisory

CVE-2026-24134

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-01-27 23:34:55

Last updated 2026-01-28 15:08:38

Assigner GitHub_M

State PUBLISHED

Description

StudioCMS is a server-side-rendered, Astro native, headless content management system. Versions prior to 0.2.0 contain a Broken Object Level Authorization (BOLA) vulnerability in the Content Management feature that allows users with the "Visitor" role to access draft content created by Editor/Admin/Owner users. Version 0.2.0 patches the issue.

← Browse all CVEs View on cve.org ↗