CVE-2026-63401 | roostorg Coop up to 1.0.1 queueId/userId permission

October 31, 2026 Yanac

A vulnerability labeled as problematic has been found in roostorg Coop up to 1.0.1. The affected element is the function addAccessibleQueuesForUser/removeAccessibleQueuesForUser. Such manipulation of the argument queueId/userId leads to permission issues.

This vulnerability is documented as CVE-2026-63401. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More