LingGuo-Drama vulnerabilities

2 known vulnerabilities in LingGuo-Drama from LingGuoAI. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  LingGuo-Drama: Missing Authorization

  CVE-2026-111723Oct 16, 2026LingGuoAI

  LingGuo-Drama through commit 8a6924a contains a missing authorization vulnerability that allows any registered user to manage all accounts through the /admin/v1/admins API protected only by AuthAdminJWT. Attackers can self-register, read every account's bcrypt

• 8.1 High severity

  LingGuo-Drama: Authorization Bypass Through User-Controlled Key

  CVE-2026-111722Oct 16, 2026LingGuoAI

  LingGuo-Drama through commit 8a6924a contains an insecure direct object reference vulnerability that allows registered users to access other users' projects because projects.Get lacks an owner check. Self-registered attackers can iterate numeric IDs via GET, P