midday vulnerabilities

1 known vulnerability in midday from Midday-ai. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  midday: Missing Authorization

  CVE-2026-81035Aug 26, 2026Midday-ai

  Midday allows any member of a team to delete it. The delete procedure in apps/api/src/trpc/routers/team.ts authorises the caller with the team-access helper, which returns true for every row in the team-membership table irrespective of the role it records, and