CVE-2026-111684: magistrala 0 through 1.0.0

Affected technology

magistrala · 0 through 1.0.0
absmach

Description’s affected range: through 1.0.0

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

Attackers can call RevokeBySerial, RevokeAll, ViewCert, ListCerts, or IssueCert under their own workspace path to disconnect other tenants' devices, disclose certificates, and mint CA-signed certificates for their device ids. Vendor/CNA’s CVSS 4.0 assessment (base score 7.2/10) rates confidentiality impact as low; integrity and availability impact as high.