CVE-2026-129428
Received Received - Intake

Pulse AI Approvals Authorization Bypass Vulnerability

Publication date: 2026-11-14

Last updated on: 2026-11-14

Assigner: VulnCheck

Description
Pulse from 5.0.17 before 6.8.0 contains a missing authorization vulnerability in the /api/ai/approvals endpoints that allows authenticated viewer-level users to manage approval requests. Attackers can list pending requests to expose proposed commands and targets, and approve or deny other users' requests, altering decision and audit state.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-14
Last Modified
2026-11-14
Generated
2026-11-15
AI Q&A
2026-11-14
EPSS Evaluated
N/A
NVD
CVE-2026-129428
EUVD
EUVD-2026-125903

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
rcourtman pulse to 6.8.0 (exc)
rcourtman pulse to 6.7.9 (inc)
rcourtman pulse 6.8.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a missing authorization flaw in Pulse versions 5.0.17 through 6.7.9 affecting the /api/ai/approvals endpoints. Authenticated users with viewer-level permissions can list pending approval requests, revealing proposed commands and targets. They can also approve or deny requests from other users, altering decision-making processes and audit trails.

Detection Guidance

Check Pulse API endpoints for unauthorized access to /api/ai/approvals. Monitor logs for viewer-level users performing actions like listing, approving, or denying approval requests. Verify user permissions and ensure only authorized roles can access these endpoints.

Impact Analysis

Attackers could expose sensitive information like proposed commands and targets by listing pending requests. They may also manipulate approvals to disrupt workflows or falsify audit records. The impact is limited to within the same organization and does not allow cross-organization access or host command execution.

Compliance Impact

This vulnerability could compromise audit integrity by allowing unauthorized approvals, potentially violating compliance requirements for tracking and accountability. It may also expose sensitive operational data, which could be a concern under GDPR or HIPAA if such data includes personal or health information.

Mitigation Strategies

Upgrade Pulse to version 6.8.0 or later to apply the patch. Temporarily restrict viewer-level user access to trusted personnel until the upgrade is completed. Review audit logs for suspicious activities related to approval requests.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-129428. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...