Lunary-ai vulnerabilities
We track 43 vulnerabilities in Lunary-ai products across 2 products. 43 are rated high or critical, and none are known to be exploited. The most recent was published on February 2, 2026.
Latest Lunary-ai vulnerabilities
- 9.1 Critical severity
lunary-ai/lunary: Incorrect Authorization
lunary-ai/lunary version 1.0.1 is vulnerable to improper authorization, allowing removed members to read, create, modify, and delete prompt templates using an old authorization token. Despite being removed from an organization, these members can still perform
- 9.1 Critical severity
lunary-ai/lunary: Incorrect Authorization
In lunary-ai/lunary version 1.0.1, a vulnerability exists where a user removed from an organization can still read, create, modify, and delete logs by re-using an old authorization token. The lunary web application communicates with the server using an 'Author
- 9.1 Critical severity
lunary-ai/lunary: Exposure of Sensitive Information to an Unauthorized Actor
By knowing an organization's ID, an attacker can join the organization without permission and gain the ability to read and modify all data within that organization. This vulnerability allows unauthorized access and modification of sensitive information, posing