CVE-2026-63458 | Perses up to 0.54.0-beta.2 Tenant Isolation dashboards project improper authorization

September 18, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Perses up to 0.54.0-beta.2. Affected by this vulnerability is an unknown functionality of the file /api/v1/projects/{project}/dashboards of the component Tenant Isolation. The manipulation of the argument project results in improper authorization.

This vulnerability is reported as CVE-2026-63458. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More