CVE-2026-119659 | blossom-editor Blossom up to 1.17.1 FolderService /folder/info folder_id authorization

October 30, 2026 Yanac

A vulnerability categorized as critical has been discovered in blossom-editor Blossom up to 1.17.1. This issue affects some unknown processing of the file /folder/info of the component FolderService. Executing a manipulation of the argument folder_id can lead to authorization bypass.

This vulnerability is handled as CVE-2026-119659. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More