Data-infra vulnerabilities
We track 1 vulnerability in Data-infra products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 16, 2026.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest Data-infra vulnerabilities
- 7.1 High severity
cube-studio: Authorization Bypass Through User-Controlled Key
Cube-studio through 2026.09.01 contains an insecure direct object reference vulnerability that allows authenticated users to stop, reset, clear or redeploy other users' notebooks and services by id. Attackers can pass sequential ids to lifecycle endpoints in v