{"id":"CVE-2026-116185","kind":"vulnerability","aliases":["CVE-2026-116185"],"related":[],"title":"OpenRemote core: authenticated users can read other realms' gateway tunnel data","description":"OpenRemote core before 1.31.0 contains an authorization bypass vulnerability that allows authenticated users to read other realms' gateway tunnel information via getGatewayActiveTunnelInfos. Attackers can request the gateway tunnel endpoint with their own realm and a victim gateway ID to disclose internal target hosts, ports, and routing data.","summary":"OpenRemote core before 1.31.0 has an authorization bypass in getGatewayActiveTunnelInfos. An authenticated user can request another realm's gateway ID and see its internal target hosts, ports and routing data.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["iot","openremote","other","self-hosted"],"not_affected_if":["openremote-1.31.0-or-later"],"how_to_check":"- Check the installed OpenRemote core version against `1.31.0` (unknown how the sources expect this to be read from a deployment)\n- unknown for any other check","fix":"- Upgrade OpenRemote core to `1.31.0` or later\n- unknown for any workaround","status":"open","published_at":"2026-10-25T14:16:58+00:00","first_seen_at":"2026-10-25T14:41:23+00:00","triaged_at":"2026-10-25T14:43:03+00:00","updated_at":"2026-10-25T14:43:03+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-10-25T14:43:03Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade OpenRemote core to `1.31.0` or later\n- unknown for any workaround","reach":"internet","title":"OpenRemote core: authenticated users can read other realms' gateway tunnel data","impact":"low","summary":"OpenRemote core before 1.31.0 has an authorization bypass in getGatewayActiveTunnelInfos. An authenticated user can request another realm's gateway ID and see its internal target hosts, ports and routing data.","category":"other","nicknames":[],"who_cares":["openremote","self-hosted","iot"],"confidence":0.6,"needs_auth":"yes","worst_case":"Internal hosts, ports and routing data of other realms exposed","analyst_note":"Confirm the affected version range and whether the advisory names a fixed patch or workaround beyond 1.31.0; the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-116185 was the only source.","how_to_check":"- Check the installed OpenRemote core version against `1.31.0` (unknown how the sources expect this to be read from a deployment)\n- unknown for any other check","needs_analyst":true,"not_affected_if":["openremote-1.31.0-or-later"],"who_is_affected":"Deployments running OpenRemote core before 1.31.0 with more than one realm and gateways that use tunnels. The sources require an authenticated user, and the exposed data is internal host, port and routing information for other realms' gateways. Single-realm deployments where all users are trusted are less exposed. unknown whether the sources name specific default configurations.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000624,"input_tokens":3339,"output_tokens":581,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-116185':14A,17A '-2026':13A,16A '1.31.0':27B,57C 'allow':64C 'anoth':39B 'attack':76C 'authent':3A,35B,65C 'author':30B,60C 'bypass':31B,61C 'contain':58C 'core':2A,25B,55C 'cve':12A,15A 'data':11A,53B,100C 'disclos':93C 'endpoint':82C 'gateway':9A,42B,71C,80C,90C 'getgatewayactivetunnelinfo':33B,75C 'host':23B,49B,96C 'id':43B,91C 'inform':73C 'intern':47B,94C 'iot':18B 'openremot':1A,19B,24B,54C 'port':50B,97C 'read':6A,68C 'realm':8A,40B,70C,86C 'request':38B,78C 'rout':52B,99C 'see':45B 'self':22B 'self-host':21B 'target':48B,95C 'tunnel':10A,72C,81C 'user':4A,36B,66C 'via':74C 'victim':89C 'vulner':62C","nicknames":[],"mitigations":[],"who_affected":"Deployments running OpenRemote core before 1.31.0 with more than one realm and gateways that use tunnels. The sources require an authenticated user, and the exposed data is internal host, port and routing information for other realms' gateways. Single-realm deployments where all users are trusted are less exposed. unknown whether the sources name specific default configurations.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-25T14:16:58+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116185","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116185","severity":null,"published_at":"2026-10-25T14:16:58+00:00","modified_at":"2026-10-25T14:16:58+00:00","first_seen_at":"2026-10-25T14:41:23+00:00","fetched_at":"2026-10-25T14:41:23+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}