CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. Exploitation may require the attacker to be authenticated.
CVE
CVE-2026-5025
Severity
MEDIUM
CVSS
6.5
EPSS
0.24%
Original NVD Description
The '/logs' and '/logs-stream' endpoints in the log router allow any authenticated user to read the full application log buffer. These endpoints only require basic authentication ('get_current_active_user') without any privilege checks (e.g., 'is_superuser').
Related CVEs
Other vulnerabilities affecting the same vendor(s)