CVE-2026-77426

High

Advisory

Published 22 Sept 2026In the index since 23 Sept 2026

Unleash: Missing await on permission check + cross-project IDOR in admin API

Carried by container images the latest versions of 2 of 18,104 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
unleash-servernpm	7.5.0	8.0.3	2

2 by stars

Chart

Latest

Affected images

Radar Score

1 of the 2 container images this version deploys carry CVE-2026-77426.

Container image	Digest	Package	Fixed in
unleashorg/unleash-server :7.5.0	9adb37e399ba	unleash-server@7.5.0	8.0.3

2,484

1 of the 1 container images this version deploys carry CVE-2026-77426.

Container image	Digest	Package	Fixed in
unleashorg/unleash-enterprise :7.5.0	245aeba40053	unleash-server@7.5.0	8.0.3

2,476

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
unleashorg/unleash-enterprise :7.5.0	245aeba40053	unleash-server@7.5.0	8.0.3	1
unleashorg/unleash-server :7.5.0	9adb37e399ba	unleash-server@7.5.0	8.0.3	1