CyberSecBulletin

Unleash vulnerabilities

We track 2 vulnerabilities in Unleash products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 22, 2026.

2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score

Latest Unleash vulnerabilities

  • 7.1 High severity

    unleash: Authorization Bypass Through User-Controlled Key

    CVE-2026-77426Unleash

    Unleash is an open-source feature management platform. Prior to 8.0.3, the Unleash admin API contains five authorization vulnerabilities. POST /api/admin/segments/strategies assigns the Promise returned by hasPermission without awaiting it, allowing authentica

  • 7.5 High severity

    unleash: Uncontrolled Recursion

    CVE-2026-63462Unleash

    Unleash is an open-source feature management platform. Prior to 7.5.2, 7.6.5, and 8.0.2, the shared OpenAPI validation error path in src/lib/error/bad-data-error.ts passes a raw request value from lodash.get to JSON.stringify in genericErrorMessage and fromOpe