CVE-2026-6355

medium

Published 2026-04-22 · Modified 2026-05-12

CVSS v3

6.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CVSS v2

—

VIR risk

6.5

Description

A vulnerability in the web application allows unauthorized users to access and manipulate sensitive data across different tenants by exploiting insecure direct object references. This could lead to unauthorized access to sensitive information and unauthorized changes to the tenant's configuration.

Predictions

Exploit likelihood

75%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

Application impact

Vendor	Product	Versions	Fixed
augmentt	augmentt	`{"endExcluding":"2025-10-02"}`	`2025-10-02`

References

https://github.com/Penguinsecq/CVE-2026-6355/

CWEs

CWE-639

Verify integrity in audit chain (admin only). AS-IS.