{"id":"CVE-2026-119414","kind":"vulnerability","aliases":["CVE-2026-119414"],"related":[],"title":"Bitwarden Server: organization members can add vault items to read-only collections","description":"Bitwarden Server before 2026.10.1 on Entity Framework backends contains an authorization bypass vulnerability that allows organization members to add ciphers to collections they cannot edit. Attackers can call POST /api/ciphers/create, where a nulled UserId is treated as administrative, to inject vault items synced to read-only or inaccessible collections' members.","summary":"Bitwarden Server versions before 2026.10.1 running on Entity Framework backends let organization members add ciphers to collections they cannot edit. An attacker can call POST /api/ciphers/create with a nulled UserId, which is treated as administrative, to inject vault items into read-only or inaccessible collections.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["bitwarden","package","password-manager","self-hosted"],"not_affected_if":["managed-hosting","non-entity-framework-backend"],"how_to_check":"- Check the Bitwarden Server version you run against `2026.10.1`; anything older is in the stated range.\n- Confirm whether the deployment uses an Entity Framework backend; the sources name that as the affected configuration.","fix":"- Bitwarden Server: move to `2026.10.1` or later.","status":"open","published_at":"2026-10-30T12:16:37+00:00","first_seen_at":"2026-10-30T12:30:23+00:00","triaged_at":"2026-10-30T12:33:00+00:00","updated_at":"2026-10-30T12:33:00+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-30T12:33:00Z","model":"claude-haiku-5-5","output":{"fix":"- Bitwarden Server: move to `2026.10.1` or later.","reach":"network","title":"Bitwarden Server: organization members can add vault items to read-only collections","impact":"medium","summary":"Bitwarden Server versions before 2026.10.1 running on Entity Framework backends let organization members add ciphers to collections they cannot edit. An attacker can call POST /api/ciphers/create with a nulled UserId, which is treated as administrative, to inject vault items into read-only or inaccessible collections.","audience":"businesses","category":"package","nicknames":[],"who_cares":["bitwarden","self-hosted","password-manager"],"confidence":0.6,"fix_status":"available","needs_auth":"yes","worst_case":"organization member injects vault items into collections they cannot edit","analyst_note":"Confirm from the Bitwarden release notes whether 2026.10.1 is the fixed version and whether managed cloud is affected; only NVD was consulted.","how_to_check":"- Check the Bitwarden Server version you run against `2026.10.1`; anything older is in the stated range.\n- Confirm whether the deployment uses an Entity Framework backend; the sources name that as the affected configuration.","plain_action":"","needs_analyst":true,"not_affected_if":["managed-hosting","non-entity-framework-backend"],"who_is_affected":"Self-hosted Bitwarden Server deployments on Entity Framework backends that use organization collections are exposed. Any organization member can reach the create endpoint, so the exposure is wider than admins. Deployments on Bitwarden's managed cloud or on non-Entity Framework backends are not described as affected.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"unknown"},"cost_usd":0.000718,"input_tokens":4149,"output_tokens":606,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-119414':16A,19A '-2026':15A,18A '/api/ciphers/create':53B,103C '2026.10.1':32B,77C 'add':6A,41B,92C 'administr':62B,111C 'allow':88C 'attack':49B,99C 'author':84C 'backend':37B,81C 'bitwarden':1A,20B,28B,74C 'bypass':85C 'call':51B,101C 'cannot':46B,97C 'cipher':42B,93C 'collect':13A,44B,73B,95C,123C 'contain':82C 'cve':14A,17A 'edit':47B,98C 'entiti':35B,79C 'framework':36B,80C 'host':27B 'inaccess':72B,122C 'inject':64B,113C 'item':8A,66B,115C 'let':38B 'manag':24B 'member':4A,40B,90C,124C 'null':56B,106C 'organ':3A,39B,89C 'packag':21B 'password':23B 'password-manag':22B 'post':52B,102C 'read':11A,69B,119C 'read-on':10A,68B,118C 'run':33B 'self':26B 'self-host':25B 'server':2A,29B,75C 'sync':116C 'treat':60B,109C 'userid':57B,107C 'vault':7A,65B,114C 'version':30B 'vulner':86C","nicknames":[],"mitigations":[],"who_affected":"Self-hosted Bitwarden Server deployments on Entity Framework backends that use organization collections are exposed. Any organization member can reach the create endpoint, so the exposure is wider than admins. Deployments on Bitwarden's managed cloud or on non-Entity Framework backends are not described as affected.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T12:16:37+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119414","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119414","severity":null,"published_at":"2026-10-30T12:16:37+00:00","modified_at":"2026-10-30T12:16:37+00:00","first_seen_at":"2026-10-30T12:30:23+00:00","fetched_at":"2026-10-30T12:30:23+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}