CVE Catalog
CVE-2026-58417
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk0.34%
27th percentile - higher than 27% of all known CVEs
Summary
The vulnerability in the REST API exposes organization membership of private organizations to the public. Unauthorized individuals can obtain information about members of private organizations.
Risk Assessment
Risk of violating the privacy of organization members and exposing sensitive information, which could be used for targeted attacks.
Recommendation
Apply the patch and check other API endpoints for similar exposure of private organization data.
Original NVD description (English source)
REST API exposes organization membership of private organizations to public