rainbond vulnerabilities

1 known vulnerability in rainbond from Goodrain. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  rainbond: Authorization Bypass Through User-Controlled Key

  CVE-2026-72741Aug 13, 2026Goodrain

  Rainbond through 6.9.7 contains a broken access control vulnerability in the CheckToken function that allows authenticated attackers to access unauthorized enterprise resources by substituting another enterprise's tenant name in URL paths. Attackers can use an