CVE-2026-73841 | OpenChoreo up to 1.1.x API Handlers exec.go project improper authorization

August 14, 2026 Yanac

A vulnerability described as critical has been identified in OpenChoreo up to 1.1.x. Affected by this issue is some unknown functionality of the file internal/openchoreo-api/api/handlers/exec.go of the component API Handlers. The manipulation of the argument project results in improper authorization.

This vulnerability is known as CVE-2026-73841. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More