CVE-2026-61745 | InvenTree up to 1.3.x Machine API api.py registry.restart_machine privileges management

September 21, 2026 Yanac

A vulnerability, which was classified as problematic, was found in InvenTree up to 1.3.x. Affected by this issue is the function registry.restart_machine of the file src/backend/InvenTree/machine/api.py of the component Machine API. Such manipulation leads to improper privilege management.

This vulnerability is referenced as CVE-2026-61745. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More