What is GHSA-rxqm-77rw-v63w?

GHSA-rxqm-77rw-v63w is a security advisory published by GitHub Security Advisories with unknown severity. AntFlow V2.0.0 is vulnerable to Incorrect Access Control. JiMuMDCCommonsRequestLoggingFilter.java...

Which CVE IDs does GHSA-rxqm-77rw-v63w cover?

GHSA-rxqm-77rw-v63w covers the following CVE IDs: CVE-2026-75415. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-rxqm-77rw-v63wunknown

AntFlow V2.0.0 is vulnerable to Incorrect Access Control. JiMuMDCCommonsRequestLoggingFilter.java...

Vendor

GitHub Security Advisories

Published

August 26, 2026

Last Modified

August 26, 2026

🔗 CVE IDs covered (1)

CVE-2026-75415 →

📋 Description

AntFlow V2.0.0 is vulnerable to Incorrect Access Control. JiMuMDCCommonsRequestLoggingFilter.java retrieves the userid from the request header as the core of the identity verification mechanism, allowing attackers to forge any user identity credential information, thereby causing sensitive information leakage.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-75415
https://github.com/Y4y17/CVE/blob/main/AntFlow/Identity%20verification%20mechanism.md
https://github.com/advisories/GHSA-rxqm-77rw-v63w