CVE-2026-111684
Deferred Deferred - Pending Action

Authorization Bypass in Magistrala Allows Certificate Manipulation

Publication date: 2026-10-16

Last updated on: 2026-10-16

Assigner: VulnCheck

Description
Magistrala through 1.0.0 contains an authorization bypass vulnerability that allows authenticated workspace members to view, issue, and revoke other tenants' device certificates by supplying foreign serials or entity ids. Attackers can call RevokeBySerial, RevokeAll, ViewCert, ListCerts, or IssueCert under their own workspace path to disconnect other tenants' devices, disclose certificates, and mint CA-signed certificates for their device ids.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-16
Last Modified
2026-10-16
Generated
2026-10-19
AI Q&A
2026-10-16
EPSS Evaluated
2026-10-18
NVD
CVE-2026-111684
EUVD
EUVD-2026-102975

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
absmach magistrala 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Magistrala through 1.0.0 has an authorization bypass flaw allowing authenticated workspace members to access, revoke, or issue device certificates belonging to other tenants by providing foreign serials or entity IDs. Attackers can exploit endpoints like RevokeBySerial, RevokeAll, ViewCert, ListCerts, or IssueCert under their workspace to disconnect devices, view certificates, or create CA-signed certificates for their own devices.

Detection Guidance

To detect this vulnerability, inspect Magistrala's certificate service logs for unauthorized certificate operations like RevokeBySerial, RevokeAll, ViewCert, ListCerts, or IssueCert. Check if workspace membership checks are bypassed by verifying if non-admin users can perform these actions on certificates outside their workspace. Review the certs service code for missing workspace scope validation in certificate operations.

Impact Analysis

If exploited, this vulnerability could allow attackers to disconnect your devices, view sensitive certificate data, or create fraudulent certificates under your tenant. This may lead to unauthorized access, data breaches, or disruption of services relying on device authentication.

Compliance Impact

This vulnerability could violate compliance requirements by enabling unauthorized access to sensitive data (e.g., certificates) or allowing attackers to impersonate devices. GDPR may require breach notification, while HIPAA could be violated if protected health information is exposed through certificate disclosure or device compromise.

Mitigation Strategies

Immediately update Magistrala to a patched version beyond 1.0.0 to address the authorization bypass. Review all device certificates for unauthorized revocations or issuances. Restrict workspace access to trusted users only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-111684. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart