CVE-2026-109168 | Dromara lamp-cloud up to 5.10.1 ListFileByBizId Endpoint /anyTenant/file bizId authorization

October 12, 2026 Yanac

A vulnerability identified as problematic has been detected in Dromara lamp-cloud up to 5.10.1. This issue affects some unknown processing of the file /anyTenant/file of the component ListFileByBizId Endpoint. The manipulation of the argument bizId leads to authorization bypass.

This vulnerability is referenced as CVE-2026-109168. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More