---
id: "CVE-2026-114661"
kind: "vulnerability"
aliases: ["CVE-2026-114661"]
title: "OpenRemote: any logged-in user can open network tunnels into edge gateways"
severity: "critical"
cvss: 9.0
epss: 0.00239
exploited: false
status: "open"
category: "other"
products: [{"name": "openremote", "fixed": ["1.31.0"], "affected": ">= 1.2.0, < 1.31.0", "ecosystem": "other"}]
ecosystems: ["other"]
tags: ["authorization", "gateway", "iot", "openremote", "other", "self-hosted", "tunnel"]
not_affected_if: ["no-gateway-tunnels-in-use", "version-1.31.0-or-later"]
published_at: "2026-10-22T02:16:58+00:00"
first_seen_at: "2026-10-23T21:57:30+00:00"
updated_at: "2026-10-24T07:15:52+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114661", "first_seen_at": "2026-10-23T21:57:30+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-10-23T22:25:22+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-114661", "first_seen_at": "2026-10-24T07:15:52+00:00"}]
---

# OpenRemote: any logged-in user can open network tunnels into edge gateways

OpenRemote versions from 1.2.0 before 1.31.0 let any authenticated user start, stop and query gateway tunnels without an admin role. An attacker can open persistent bidirectional TCP tunnels into an edge gateway's network or tear down tunnels operators rely on.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- other:openremote affected >= 1.2.0, < 1.31.0 fixed 1.31.0

## How to check

Check the OpenRemote version running on the manager (1.2.0 up to but not including 1.31.0 is affected).

## Fix

Upgrade OpenRemote to 1.31.0 or later.
Until then, restrict who holds accounts on the instance and review gateway tunnel activity.

## Timeline

- 2026-10-23T21:57:30+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-114661
- 2026-10-23T22:25:22+00:00 analyst — Read VulnCheck advisory, 1.31.0 release notes, and source of GatewayServiceResource (1.30.1 interface, 1.31.0 impl). Endpoints: POST/DELETE gateway/tunnel (plus GETs tunnel/{realm}/{id}...) in the manager REST API; full /api/{realm}/ prefix inferred, not read. GHSA-5h8w-vg25-fw38 page not fetchable. Whether tunnels are on by default: not stated in sources, unknown. No exploitation or PoC found; no X search done. Sibling cross-realm gateway GHSAs also fixed in 1.31.0.
- 2026-10-24T07:15:52+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-114661

## Documents

- [advisory] VulnCheck: OpenRemote missing authorization in gateway tunnel endpoints https://www.vulncheck.com/advisories/openremote-1.2.0-before-1.31.0-missing-authorization-in-gateway-tunnel-endpoints
- [describes] GatewayServiceResource.java at 1.30.1 (vulnerable interface, endpoint paths) https://raw.githubusercontent.com/openremote/openremote/1.30.1/model/src/main/java/org/openremote/model/gateway/GatewayServiceResource.java
- [fix] OpenRemote 1.31.0 release notes https://github.com/openremote/openremote/releases/tag/1.31.0

## From the sources

OpenRemote 1.2.0 before 1.31.0 contains a missing authorization vulnerability in GatewayServiceResource that allows any authenticated user to start, stop and query gateway tunnels without an administrative role. Attackers can send POST or DELETE requests to the gateway tunnel endpoint to open persistent bidirectional TCP circuits into an edge gateway's network or tear down operator tunnels.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_