CyberSecBulletin

Wavelens vulnerabilities

We track 1 vulnerability in Wavelens products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 14, 2026.

1vulnerabilities
1critical
0high
0exploited
9.4average CVSS score

Latest Wavelens vulnerabilities

  • 9.4 Critical severity

    gradient: Missing Authentication for Critical Functionality

    CVE-2026-44592Wavelens

    Gradient is a nix-based continuous integration system. In 1.1.0, when GRADIENT_DISCOVERABLE=true (the default, and the NixOS module default), anyone who can reach /proto can register as a worker without any credentials by sending a fresh, never-registered work