CVE-2026-94532 | dromara lamp-cloud up to 5.10.0 getUserInfoById endpoint userId authorization

September 22, 2026 Yanac

A vulnerability, which was classified as problematic, was found in dromara lamp-cloud up to 5.10.0. This vulnerability affects unknown code of the component getUserInfoById endpoint. The manipulation of the argument userId results in authorization bypass.

This vulnerability is reported as CVE-2026-94532. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More