CVE-2026-85605
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
Slink before 1.12.3 fails to properly authorize access to image comment endpoints, allowing unauthenticated attackers to read comment threads via GET /api/image/{imageId}/comments and server-sent-events subscriptions. Attackers who obtain image IDs out of band can retrieve full comment threads on public images and subscribe to live comment updates without authentication or authorization checks.
Risk Assessment
The risk involves unauthorized disclosure of comment content, potentially violating user privacy and data integrity. An attacker can monitor live discussions without any privileges.
Recommendation
It is recommended to immediately upgrade Slink to version 1.12.3 or later, which includes authorization fixes. Also, verify if any unauthorized access to comments has occurred.
Other vulnerabilities in Slink
Original NVD description (English source)
Slink before 1.12.3 fails to properly authorize access to image comment endpoints, allowing unauthenticated attackers to read comment threads via GET /api/image/{imageId}/comments and server-sent-events subscriptions. Attackers who obtain image IDs out of band can retrieve full comment threads on public images and subscribe to live comment updates without authentication or authorization checks.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS