CVE-2026-119659EUVD-2026-114075GHSA-G885-V5XM-XH6Q
Blossom through 1.17.1 Authorization Bypass via Folder Endpoints
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
Blossom, a software application, is affected by an authorization bypass flaw in its folder-handling endpoints. Authenticated users can view, rename, change visibility of, or delete other users' folders because the folder lookups check only the folder ID and not ownership.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated users to access other users' folders because FolderService queries filter only on folder id. Attackers can supply another user's folder id to /folder/info, /folder/upd, /folder/open or /folder/del to read storage paths, rename, toggle visibility, or delete folders.
Timeline
- CVE published
- First seen by cve.now
Affected versions
- blossom-editor Blossom
through 1.17.1