CVE-2026-17070

Summary

The flaw is a missing authorization vulnerability that allows unauthorized access to functionality not properly constrained by ACLs, potentially enabling attackers to perform actions they should not be able to.

Exploitability

Exploitation is relatively straightforward given the lack of proper authorization checks, requiring an attacker to have access to the affected functionality.

Blast radius

If exploited, this could lead to significant data compromise, unauthorized access to critical functions, and potential system compromise, impacting the entire organization.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Liman MYS 2.3.1 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.