reva vulnerabilities

1 known vulnerability in reva from Opencloud-eu. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  reva: Incorrect Authorization

  CVE-2026-23989Feb 6, 2026Opencloud-eu

  REVA is an interoperability platform. Prior to 2.42.3 and 2.40.3, a bug in the GRPC authorization middleware of the "Reva" component of OpenCloud allows a malicious user to bypass the scope verification of a public link. By exploiting this via the the "archive