What is GHSA-7fg6-gvjw-377p?

GHSA-7fg6-gvjw-377p is a security advisory published by GitHub Security Advisories with Medium severity. Due to improper permission checks in Lobster_pro, attackers are able to interact with endpoints...

Which CVE IDs does GHSA-7fg6-gvjw-377p cover?

GHSA-7fg6-gvjw-377p covers the following CVE IDs: CVE-2026-3322. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-7fg6-gvjw-377pMedium

Due to improper permission checks in Lobster_pro, attackers are able to interact with endpoints...

Vendor

GitHub Security Advisories

Published

October 26, 2026

Last Modified

October 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-3322 →

📋 Description

Due to improper permission checks in Lobster_pro, attackers are able to interact with endpoints that should require administrative privileges. This issue affects Lobster_pro version 4.12.12-LTS and potentially other versions prior to 25.1.3.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-3322
https://www.schutzwerk.com/en/blog/schutzwerk-sa-2025-002
http://seclists.org/fulldisclosure/2026/Oct/35
https://github.com/advisories/GHSA-7fg6-gvjw-377p