IgnisDa Ryot up to 10.5.5 Collection Contents Query content_operations.rs collection_contents collection_id privileges management

Summaryinfo

A vulnerability marked as problematic has been reported in IgnisDa Ryot up to 10.5.5. The affected element is the function collection_contents of the file crates/services/collection/src/content_operations.rs of the component Collection Contents Query. This manipulation of the argument collection_id causes privileges management. This vulnerability appears as CVE-2026-119800. The attack may be initiated remotely. There is no available exploit. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability classified as problematic was found in IgnisDa Ryot up to 10.5.5. Affected by this vulnerability is the function collection_contents of the file crates/services/collection/src/content_operations.rs of the component Collection Contents Query. The manipulation of the argument collection_id with an unknown input leads to a privileges management vulnerability. The CWE definition for the vulnerability is CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. As an impact it is known to affect confidentiality. The summary by CVE is:

Ryot is a self-hosted personal tracking application. Prior to 10.5.6, the collectionContents GraphQL query implemented by collection_contents() in crates/services/collection/src/content_operations.rs accepts a caller-controlled CollectionContentsInput.collection_id and returns a collection without checking whether the authenticated user owns it, collaborates on it, or may view it. The caller's user id is used only to annotate the response, allowing any authenticated user who obtains another collection's id to read the owner's identity, collection name and description, reviews, and complete item list across the tenant boundary. This issue is fixed in version 10.5.6.

It is possible to read the advisory at github.com. This vulnerability is known as CVE-2026-119800 since 10/30/2026. The exploitation appears to be easy. The attack can be launched remotely. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1068 according to MITRE ATT&CK.

Upgrading to version 10.5.6 eliminates this vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• IgnisDa

Name

• Ryot

Version

• 10.5.0
• 10.5.1
• 10.5.2
• 10.5.3
• 10.5.4
• 10.5.5

Website

• Product: https://github.com/IgnisDa/ryot/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion