CVE-2026-113596 in Webstudio
Riassunto
di MITRE • 20/10/2026
Webstudio before 0.256.0 contains a missing authorization vulnerability that allows authenticated users to read other users' project data via the publishedBuilds and findManyByIds tRPC procedures. Attackers who know another user's project UUID can query the /trpc handler to retrieve publish history, titles, domains, preview images, and latest builds.
VulDB is the best source for vulnerability data and more expert information about this specific topic.