CVE-2026-125752 | meteroid-oss Meteroid up to 2.1.x CouponsService CouponsService UpdateCouponStatus gRPC handler coupon id/tenant ID authorization

November 10, 2026 Yanac

A vulnerability marked as critical has been reported in meteroid-oss Meteroid up to 2.1.x. This affects the function CouponsService UpdateCouponStatus gRPC handler of the component CouponsService. The manipulation of the argument coupon id/tenant ID leads to authorization bypass.

This vulnerability is uniquely identified as CVE-2026-125752. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More