---
id: "CVE-2026-122099"
page: "https://infrastack.ai/live/CVE-2026-122099"
kind: "vulnerability"
aliases: ["CVE-2026-122099"]
title: "CAI Content Credentials: incorrect authorization allows limited unauthorized write access"
severity: "low"
cvss: 2.9
epss: null
exploited: false
status: "open"
category: "other"
products: [{"name": "CAI Content Credentials", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["content-credentials", "other"]
not_affected_if: []
published_at: "2026-11-10T22:18:28+00:00"
first_seen_at: "2026-11-10T22:27:28+00:00"
updated_at: "2026-11-10T22:31:08+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-122099", "first_seen_at": "2026-11-10T22:27:28+00:00"}]
exploit_sources: []
---

# CAI Content Credentials: incorrect authorization allows limited unauthorized write access

Link for people: https://infrastack.ai/live/CVE-2026-122099 (this .md is for agents)

CAI Content Credentials has an incorrect authorization flaw that lets an attacker bypass a security feature and gain limited write access. The sources say exploitation depends on conditions outside the attacker's control and needs no user interaction.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:CAI Content Credentials affected range not listed fixed no fixed version listed

## Timeline

- 2026-11-10T22:27:28+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-122099

## From the sources

CAI Content Credentials is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_