CVE-2026-129357 | Linux Foundation Magma up to 1.9.0 Host Middleware middleware.ts hostOrgMiddleware role authorization

SecurityVulns
Yanac

A vulnerability has been found in Linux Foundation Magma up to 1.9.0 and classified as critical. This issue affects the function hostOrgMiddleware of the file nms/server/host/middleware.ts of the component Host Middleware. This manipulation of the argument role causes missing authorization.

The identification of this vulnerability is CVE-2026-129357. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More