CVE-2026-74021

Versions of Chaplin up to 2.6.8 are vulnerable to unauthenticated broken access control, allowing attackers to bypass authorization mechanisms and potentially access sensitive resources. This high-severity vulnerability poses significant risks to applications utilizing these versions, making it critical for developers and security teams to prioritize updates and implement access controls. Organizations relying on Chaplin for web application development should address this issue promptly to mitigate potential exploitation.