GHSA-g5w6-2w7g-5hvqMediumCVSS 4.3
OpsTree REMS through 1.0.0 contains an improper authorization vulnerability that allows...
🔗 CVE IDs covered (1)
📋 Description
OpsTree REMS through 1.0.0 contains an improper authorization vulnerability that allows authenticated users to set an incident's reporter to another user by supplying a client-controlled reporter field. Attackers can send crafted POST /api/v1/incidents or PATCH /api/v1/incidents/{id}/status requests to falsify incident attribution and corrupt the accountability audit trail.
🔗 References (5)
- https://nvd.nist.gov/vuln/detail/CVE-2026-126766
- https://gist.github.com/neelkotnis/e11fb4f70d8ec850fa601566b95472a4
- https://opstree.com/rems-ai-powered-observability
- https://www.vulncheck.com/advisories/opstree-rems-through-1.0.0-reporter-spoofing-via-api-v1-incidents
- https://github.com/advisories/GHSA-g5w6-2w7g-5hvq