CVE-2026-54641 | OpenRemote up to 1.24.1 UserResource UserResourceImpl.java get/getUserClientRoles/getUserRealmRoles improper authorization

October 13, 2026 Yanac

A vulnerability classified as problematic was found in OpenRemote up to 1.24.1. This affects the function get/getUserClientRoles/getUserRealmRoles of the file manager/src/main/java/org/openremote/manager/security/UserResourceImpl.java of the component UserResource. Such manipulation leads to improper authorization.

This vulnerability is listed as CVE-2026-54641. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More