Midday-ai vulnerabilities
We track 1 vulnerability in Midday-ai products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 26, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Midday-ai vulnerabilities
- 8.1 High severity
midday: Missing Authorization
Midday allows any member of a team to delete it. The delete procedure in apps/api/src/trpc/routers/team.ts authorises the caller with the team-access helper, which returns true for every row in the team-membership table irrespective of the role it records, and