CVE-2026-67439 | OliveTin up to 3000.13.0 API api.go StartActionAndWait/StartActionByGetAndWait permission

July 29, 2026 Yanac

A vulnerability has been found in OliveTin up to 3000.13.0 and classified as problematic. This issue affects the function StartActionAndWait/StartActionByGetAndWait of the file service/internal/api/api.go of the component API. This manipulation causes permission issues.

The identification of this vulnerability is CVE-2026-67439. It is possible to initiate the attack remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More