CVE-2026-101914 | grpc grpc-js up to 1.13.0/1.14.0 RBAC improper authorization

September 28, 2026 Yanac

A vulnerability was found in grpc grpc-js up to 1.13.0/1.14.0. It has been rated as critical. Affected by this issue is some unknown functionality of the component RBAC. Performing a manipulation results in improper authorization.

This vulnerability is cataloged as CVE-2026-101914. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More