CVE-2026-16753

— UNSCOREDpublic exploit available

Published 2026-10-13 · Updated 2026-10-16

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and including 2.4.10, allows an authenticated administrator or developer in one organization to execute a library query belonging to another organization via a crafted request containing the victim library-query identifier.

Public exploit & PoC references

https://github.com/lowcoder-org/lowcoder

All references

https://github.com/lowcoder-org/lowcoder
https://www.kb.cert.org/vuls/id/382143

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.