CVE-2026-121631 | Lightdash up to 3.136.x /dashboard/fields RenameService projectUuid authorization

November 3, 2026 Yanac

A vulnerability described as problematic has been identified in Lightdash up to 3.136.x. This affects the function RenameService of the file /dashboard/fields. Executing a manipulation of the argument projectUuid can lead to authorization bypass.

This vulnerability appears as CVE-2026-121631. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More