CVSS 3.1
8.1 highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:NCVE-2026-23989
High (8.1) in heinlein opencloud reva. EPSS 0.3% chance of exploitation in the next 30 days. Fixed in github.com/opencloud-eu/reva/v2 2.40.3, 2.42.3.
REVA is an interoperability platform. Prior to 2.42.3 and 2.40.3, a bug in the GRPC authorization middleware of the "Reva" component of OpenCloud allows a malicious user to bypass the scope verification of a public link. By exploiting this via the the "archiver" service this can be leveraged to create an archive (zip or tar-file) containing all resources that this creator of the public link has access to. This vulnerability is fixed in 2.42.3 and 2.40.3.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 23% of CVEs (scores of 2026-10-31)
- CWE
- CWE-863
- Published
- Modified
- Record from
- the NVD, synced
Affected
- heinlein:opencloud_reva
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-9j2f-3rj3-wgpg | Go | github.com/opencloud-eu/reva/v2 | <2.40.3 | 2.40.3 |
| GHSA-9j2f-3rj3-wgpg | Go | github.com/opencloud-eu/reva/v2 | >=2.41.0 <2.42.3 | 2.42.3 |
| GO-2026-4444 | Go | github.com/opencloud-eu/reva | all versions | no fix published |
| GO-2026-4444 | Go | github.com/opencloud-eu/reva/v2 | <2.40.3 >=2.41.0 <2.42.3 | 2.40.3, 2.42.3 |