---
id: "CVE-2026-119800"
page: "https://infrastack.ai/live/CVE-2026-119800"
kind: "vulnerability"
aliases: ["CVE-2026-119800"]
title: "Ryot: any logged-in user can read other users' private collections"
severity: "medium"
cvss: 4.3
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["graphql", "package", "ryot", "self-hosted"]
not_affected_if: ["single-user", "version-10.5.6-or-later"]
published_at: "2026-11-06T22:17:50+00:00"
first_seen_at: "2026-11-06T22:44:32+00:00"
updated_at: "2026-11-06T22:44:55+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119800", "first_seen_at": "2026-11-06T22:44:32+00:00"}]
exploit_sources: []
---

# Ryot: any logged-in user can read other users' private collections

Link for people: https://infrastack.ai/live/CVE-2026-119800 (this .md is for agents)

Ryot, a self-hosted personal tracking app, lets any authenticated user request another user's collection by its id and get back the owner's identity, collection name, description, reviews and full item list. An attacker with an account and a collection id can read data that belongs to someone else on the same instance.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Look up the Ryot version the instance runs; it is affected below `10.5.6`.
- Check whether the instance allows more than one account (multi-user tenants), since the flaw only matters when other users' collections exist.

## Fix

- Ryot: upgrade to `10.5.6` or later.

## Timeline

- 2026-11-06T22:44:32+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-119800

## Documents

- [advisory] Vendor advisory: github.com https://github.com/IgnisDa/ryot/security/advisories/GHSA-pv32-9hxm-ph4v
- [fix] Patch: github.com https://github.com/IgnisDa/ryot/commit/822cc6701b46aedbc436abbf02e7efb94afd5f05
- [fix] Release notes: github.com https://github.com/IgnisDa/ryot/releases/tag/v10.5.6

## From the sources

Ryot is a self-hosted personal tracking application. Prior to 10.5.6, the collectionContents GraphQL query implemented by collection_contents() in crates/services/collection/src/content_operations.rs accepts a caller-controlled CollectionContentsInput.collection_id and returns a collection without checking whether the authenticated user owns it, collaborates on it, or may view it. The caller's user id is used only to annotate the response, allowing any authenticated user who obtains another collection's id to read the owner's identity, collection name and description, reviews, and complete item list across the tenant boundary. This issue is fixed in version 10.5.6.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_