{"id":"CVE-2026-112065","kind":"vulnerability","aliases":["CVE-2026-112065"],"related":[],"title":"Consent history route lacks permission check, exposing consent data","description":"The routes that provide consent history and statistics data did not check whether the backend user had access to the module or to the requested page. Any authenticated backend user, regardless of permissions, could therefore retrieve consent data of any site in the installation.","summary":"Consent history and statistics routes did not verify that a backend user had access to the module or page. Any logged-in backend user, whatever their permissions, can read consent data for every site in the installation.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["other","self-hosted"],"not_affected_if":["auth-required"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-20T10:17:03+00:00","first_seen_at":"2026-10-23T21:57:20+00:00","triaged_at":"2026-10-25T04:24:54+00:00","updated_at":"2026-10-25T04:24:54+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-10-25T04:24:54Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Consent history route lacks permission check, exposing consent data","impact":"medium","summary":"Consent history and statistics routes did not verify that a backend user had access to the module or page. Any logged-in backend user, whatever their permissions, can read consent data for every site in the installation.","category":"other","nicknames":[],"who_cares":["self-hosted"],"confidence":0.6,"needs_auth":"yes","worst_case":"Any backend user reads consent data for all sites","analyst_note":"Sources do not name the product or the fixed version; check the NVD entry and vendor advisory for the affected product and patched release.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["auth-required"],"who_is_affected":"unknown","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000481,"input_tokens":3280,"output_tokens":307,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-112065':12A,15A '-2026':11A,14A 'access':33B,75C 'authent':85C 'backend':30B,43B,72C,86C 'check':6A,69C 'consent':1A,8A,20B,50B,62C,94C 'could':91C 'cve':10A,13A 'data':9A,51B,66C,95C 'everi':53B 'expos':7A 'histori':2A,21B,63C 'host':19B 'instal':57B,101C 'lack':4A 'log':41B 'logged-in':40B 'modul':36B,78C 'page':38B,83C 'permiss':5A,47B,90C 'provid':61C 'read':49B 'regardless':88C 'request':82C 'retriev':93C 'rout':3A,24B,59C 'self':18B 'self-host':17B 'site':54B,98C 'statist':23B,65C 'therefor':92C 'user':31B,44B,73C,87C 'verifi':27B 'whatev':45B 'whether':70C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T10:17:03+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"f4fb688c-4412-4426-b4b8-421ecf27b14a","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112065","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112065","severity":null,"published_at":"2026-10-20T10:17:03+00:00","modified_at":"2026-10-20T19:28:52+00:00","first_seen_at":"2026-10-23T21:57:20+00:00","fetched_at":"2026-10-23T22:28:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}