CVE-2026-107841
Received Received - Intake

Unauthorized Document Cancellation in pacioli

Publication date: 2026-10-09

Last updated on: 2026-10-09

Assigner: GitHub, Inc.

Description
pacioli provides least-privilege governance and a governed agent broker for ERPNext. From version 0.9.6 until version 0.10.0, the pacioli-guard document-layer consent gate allows nested cancellation operations to ride any consent established by an enclosing governed act without checking whether the marker authorizes cancellation. A credential with API Key Scope.require_consent can submit a caller-controlled Sales Invoice or other supported document under a valid human-minted submit marker and reach Document.cancel() for a different pre-existing submitted document, bypassing the marker's document and act binding, single-use spend, and denial audit. The unauthorized cancellation can reverse the target document's ledger effect; principals without a consent-gated grant are not affected. This issue is fixed in version 0.10.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-09
Last Modified
2026-10-09
Generated
2026-10-10
AI Q&A
2026-10-09
EPSS Evaluated
N/A
NVD
CVE-2026-107841
EUVD
EUVD-2026-95937

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
john-broadway pacioli >= 0.9.6, < 0.10.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in pacioli allows unauthorized cancellation of documents like Sales Invoices. A credential with API Key Scope.require_consent can bypass consent checks and trigger Document.cancel() on a different document than the one authorized by a human-minted submit marker. This bypasses document binding, single-use limits, and audit trails.

Detection Guidance

To detect this vulnerability, check if your pacioli-guard version is below 0.10.0. Run: pip show pacioli-guard or grep version in your package files. Monitor ERPNext logs for unauthorized document cancellations or ledger reversals. Look for API calls with Scope.require_consent bypassing consent checks.

Impact Analysis

If exploited, this vulnerability could allow unauthorized reversal of financial transactions or other ledger changes in ERPNext. Principals without consent-gated grants are not affected, but the unauthorized cancellation could disrupt accounting records or compliance tracking.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by allowing unauthorized modifications to financial or operational documents without proper consent. Unauthorized cancellations could reverse ledger effects, affecting audit trails and data integrity required by these regulations.

Mitigation Strategies

Upgrade pacioli to version 0.10.0 or later to address the nested cancellation consent bypass issue.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-107841. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart