---
id: "CVE-2026-121267"
page: "https://infrastack.ai/live/CVE-2026-121267"
kind: "vulnerability"
aliases: ["CVE-2026-121267"]
title: "eta-remote: incorrect default permissions let users reach restricted functions"
severity: "high"
cvss: 7.8
epss: null
exploited: false
status: "open"
category: "other"
products: [{"name": "eta-remote", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["eta-remote", "other"]
not_affected_if: ["version-0.0.3-or-later"]
published_at: "2026-11-10T13:18:22+00:00"
first_seen_at: "2026-11-10T13:22:03+00:00"
updated_at: "2026-11-10T13:23:31+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-121267", "first_seen_at": "2026-11-10T13:22:03+00:00"}]
exploit_sources: []
---

# eta-remote: incorrect default permissions let users reach restricted functions

Link for people: https://infrastack.ai/live/CVE-2026-121267 (this .md is for agents)

eta-remote, a TÜBİTAK BİLGEM product, ships with incorrect default permissions that let callers reach functionality not properly restricted by access control lists. An attacker who can reach the service may use features they should not have access to.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:eta-remote affected range not listed fixed no fixed version listed

## How to check

- Check the installed eta-remote version and whether it falls in the affected range `0.0.2` to before `0.0.3`
- Review the access control or permission settings the product applies by default, since the sources do not name the exact setting

## Fix

- eta-remote: move to `0.0.3` or later

## Timeline

- 2026-11-10T13:22:03+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-121267

## From the sources

Incorrect default permissions vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-remote allows Accessing Functionality Not Properly Constrained by ACLs.

This issue affects eta-remote: from 0.0.2 before 0.0.3.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_