CVE-2026-113596 | webstudio-is Webstudio up to 0.255.x tRPC Procedures publishedBuilds/findManyByIds project_uuid improper authorization

October 20, 2026 Yanac

A vulnerability identified as problematic has been detected in webstudio-is Webstudio up to 0.255.x. This vulnerability affects the function publishedBuilds/findManyByIds of the component tRPC Procedures. Performing a manipulation of the argument project_uuid results in improper authorization.

This vulnerability is known as CVE-2026-113596. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More