What is GHSA-jrwj-grf5-9fv3?

GHSA-jrwj-grf5-9fv3 is a security advisory published by GitHub Security Advisories with Low severity. OpenRemote before 1.31.0 contains an authorization bypass vulnerability that allows realm admins...

Which CVE IDs does GHSA-jrwj-grf5-9fv3 cover?

GHSA-jrwj-grf5-9fv3 covers the following CVE IDs: CVE-2026-116184. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-jrwj-grf5-9fv3Low

OpenRemote before 1.31.0 contains an authorization bypass vulnerability that allows realm admins...

Vendor

GitHub Security Advisories

Published

October 25, 2026

Last Modified

October 25, 2026

🔗 CVE IDs covered (1)

CVE-2026-116184 →

📋 Description

OpenRemote before 1.31.0 contains an authorization bypass vulnerability that allows realm admins to impersonate gateways in other realms because GatewayService only checks the gateway ID, not the realm. Attackers with WRITE:ADMIN in one realm can create a service user named after another realm's gateway ID to overwrite its descendant assets and open SSH tunnels into its local network.

🔗 References (4)

https://github.com/openremote/core/security/advisories/GHSA-2j4x-qh6q-q8mm
https://nvd.nist.gov/vuln/detail/CVE-2026-116184
https://www.vulncheck.com/advisories/openremote-before-1.31.0-cross-realm-gateway-impersonation-via-websocket
https://github.com/advisories/GHSA-jrwj-grf5-9fv3