CVE-2026-23989

Description

REVA is an interoperability platform. Prior to 2.42.3 and 2.40.3, a bug in the GRPC authorization middleware of the "Reva" component of OpenCloud allows a malicious user to bypass the scope verification of a public link. By exploiting this via the the "archiver" service this can be leveraged to create an archive (zip or tar-file) containing all resources that this creator of the public link has access to. This vulnerability is fixed in 2.42.3 and 2.40.3.

PUBLISHED Reserved 2026-01-19 | Published 2026-02-06 | Updated 2026-02-06 | Assigner GitHub_M

Problem types

CWE-863: Incorrect Authorization

Product status

References

github.com/...u/reva/security/advisories/GHSA-9j2f-3rj3-wgpg

github.com/...ommit/95aa2bc5d980eaf6cc134d75782b4f5ac7b36ae1

cve.org (CVE-2026-23989)

nvd.nist.gov (CVE-2026-23989)

Download JSON