What is GHSA-2rhx-q7hx-f25r?

GHSA-2rhx-q7hx-f25r is a security advisory published by GitHub Security Advisories with High severity. Broken object-level access controls and the use of a deterministic pattern during random ID...

Which CVE IDs does GHSA-2rhx-q7hx-f25r cover?

GHSA-2rhx-q7hx-f25r covers the following CVE IDs: CVE-2026-57869. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-2rhx-q7hx-f25rHigh

Broken object-level access controls and the use of a deterministic pattern during random ID...

Vendor

GitHub Security Advisories

Published

July 7, 2026

Last Modified

July 7, 2026

🔗 CVE IDs covered (1)

CVE-2026-57869 →

📋 Description

Broken object-level access controls and the use of a deterministic pattern during random ID generation in MicroRealEstate allows attackers to access documents uploaded by landlords or tenants without authorization.

This issue affects MicroRealEstate: through 1.0.0-alpha3.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-57869
https://github.com/microrealestate/microrealestate
https://www.themissinglink.com.au/security-advisories/cve-2026-57869
https://github.com/advisories/GHSA-2rhx-q7hx-f25r