CVE-2026-119599

    Dashboard / Vulnerabilities / CVE-2026-119599

    CVE-2026-119599

    Published: 30 Oct 2026Last Modified: 1 Nov 2026

    Summary: AxonHub through 1.0.0-beta11 Privilege Escalation via Service Account API Key Scopes

    Details: AxonHub through 1.0.0-beta11 contains a privilege escalation vulnerability that allows project users to assign system-level scopes by creating service_account API keys with unvalidated scopes. Attackers holding write_api_keys can mint keys with read_channels and query /admin/graphql to read every channel's configuration, including base URLs and model lists.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/119xxx/CVE-2026-119599.json, https://hackmd.io/@hieuPenguinnn/axonhub-apikey-scope-grant-privilege-escalation, https://nvd.nist.gov/vuln/detail/CVE-2026-119599, https://www.vulncheck.com/advisories/axonhub-through-1.0.0-beta11-privilege-escalation-via-service-account-api-key-scopes, https://github.com/looplj/axonhub/issues/2724, https://github.com/looplj/axonhub/commit/e5c904efbdabd80d74827dfae478330339c5a514, https://github.com/looplj/axonhub/pull/2741, https://github.com/looplj/axonhub, https://github.com/looplj/axonhub/blob/v1.0.0-beta11/internal/server/biz/api_key.go#L340, https://github.com/looplj/axonhub/blob/v1.0.0-beta11/internal/server/biz/api_key.go#L448

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -e5c904efbdabd80d74827dfae478330339c5a514

    Affected versions

    v1.0.0-beta11
    v1.0.0-beta10
    v1.0.0-beta9
    v1.0.0-beta8
    v1.0.0-beta7
    v1.0.0-beta6
    v1.0.0-beta5
    v1.0.0-beta4
    v1.0.0-beta3
    v1.0.0-beta2
    v1.0.0-beta1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-119599 | CVE-DB