Didi vulnerabilities
We track 3 vulnerabilities in Didi products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 16, 2026.
Latest Didi vulnerabilities
- 8.8 High severity
KnowStreaming: Missing Authorization
KnowStreaming through 3.4.1 fails to enforce role-based access control on REST API endpoints, allowing any authenticated user to access protected functionality. Attackers can call identity-management endpoints to create administrator accounts or grant themselv
- 9.8 Critical severity
Super-Jacoco: Improper Neutralization of Special Elements used in an OS Command
A vulnerability has been found in didi Super-Jacoco 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /cov/triggerUnitCover. The manipulation of the argument uuid leads to os command injection. The attack ca
- 7.5 High severity
DDMQ: Incorrect Authorization
A vulnerability has been found in didi DDMQ 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Console Module. The manipulation with the input /;login leads to improper authentication. The attack can be