CVE-2026-74020

HighCVSS 7.5

Published: 20/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 20/08/2026(UTC)NVD NIST

Summary

Unauthenticated Broken Access Control vulnerability in Koji versions up to 2.2.1. An attacker without authentication can gain unauthorized access to protected functions.

Risk Assessment

Risk of unauthorized access to sensitive system functions, potentially leading to data integrity compromise or system takeover.

Recommendation

Update Koji to the latest available version that includes a fix for this vulnerability.

Other vulnerabilities in Koji

CVE-2017-1002153High
Koji version 1.13.0 does not properly validate SCM paths, allowing an attacker to work around blacklisted paths for build submission.

Original NVD description (English source)

Unauthenticated Broken Access Control in Koji <= 2.2.1 versions.