CVE-2026-121458 | CoreBunch Instatic up to 0.0.20 AI/MCP Content Read Tools content_get_document/content_list_documents improper authorization

November 3, 2026 Yanac

A vulnerability marked as problematic has been reported in CoreBunch Instatic up to 0.0.20. This affects the function content_get_document/content_list_documents of the component AI/MCP Content Read Tools. This manipulation causes improper authorization.

This vulnerability appears as CVE-2026-121458. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More