https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 27 Sep 2026 19:10:32 +0000 https://vulnerability.circl.lu/sighting/03161634-cf34-472a-9957-b608f3f99718/export {"uuid": "03161634-cf34-472a-9957-b608f3f99718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83805", "type": "seen", "source": "https://gist.github.com/alon710/e1072924de003b6765183a66872ae79e", "content": "# CVE-2026-83805: CVE-2026-83805: Authorization Bypass and Privilege Escalation in Nautobot Approval Workflows\n\n> **CVSS Score:** 6.4\n> **Published:** 2026-09-22\n> **Full Report:** https://cvereports.com/reports/CVE-2026-83805\n\n## Summary\nAn authorization bypass vulnerability exists in Nautobot's REST API endpoints handling approval workflows. Due to an architectural inconsistency, a standalone, generic REST API endpoint for creating approval responses was exposed without propagating the required business-logic validations. This allows low-privileged authenticated users to submit forged, self-approved votes, bypassing approval thresholds and triggering unauthorized server-side automated jobs.\n\n## TL;DR\nA validation discrepancy between Nautobot controllers allows authenticated low-privileged users to directly POST forged approval responses, bypass group and permission checks, and trigger the execution of privileged automated tasks.\n\n## Technical Details\n\n- **CWE ID**: CWE-285\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 6.4 (Medium)\n- **EPSS Score**: 0.00\n- **Exploit Status**: none\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Nautobot Network Automation Platform\n- **Nautobot**: >= 3.0.0, < 3.1.8 (Fixed in: `3.1.8`)\n\n## Mitigation\n\n- Upgrade Nautobot deployments to version 3.1.8 or higher.\n- Revoke the 'extras.add_approvalworkflowstageresponse' permission from non-administrative users.\n- Implement WAF/API Gateway rules to block modification methods targeting the response endpoints.\n\n**Remediation Steps:**\n1. Inspect current Nautobot deployment versions and schedule an upgrade to 3.1.8.\n2. Apply database queries to audit for incongruencies between the logged transaction user and the record's user attribute.\n3. Modify default Django user group permissions to restrict approval response addition capabilities.\n\n## References\n\n- [GHSA-q4c5-2j6f-r476 Security Advisory](https://github.com/nautobot/nautobot/security/advisories/GHSA-q4c5-2j6f-r476)\n- [Nautobot Fix Commit 8682707](https://github.com/nautobot/nautobot/commit/8682707d0391cbfd7694e3276127b78dc9cf29d8)\n- [Nautobot Release v3.1.8 Official Tag](https://github.com/nautobot/nautobot/releases/tag/v3.1.8)\n- [NVD - CVE-2026-83805](https://nvd.nist.gov/vuln/detail/CVE-2026-83805)\n- [CVE.org - CVE-2026-83805](https://www.cve.org/CVERecord?id=CVE-2026-83805)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-83805) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-23T12:31:40.727694Z"} {"uuid": "03161634-cf34-472a-9957-b608f3f99718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83805", "type": "seen", "source": "https://gist.github.com/alon710/e1072924de003b6765183a66872ae79e", "content": "# CVE-2026-83805: CVE-2026-83805: Authorization Bypass and Privilege Escalation in Nautobot Approval Workflows\n\n> **CVSS Score:** 6.4\n> **Published:** 2026-09-22\n> **Full Report:** https://cvereports.com/reports/CVE-2026-83805\n\n## Summary\nAn authorization bypass vulnerability exists in Nautobot's REST API endpoints handling approval workflows. Due to an architectural inconsistency, a standalone, generic REST API endpoint for creating approval responses was exposed without propagating the required business-logic validations. This allows low-privileged authenticated users to submit forged, self-approved votes, bypassing approval thresholds and triggering unauthorized server-side automated jobs.\n\n## TL;DR\nA validation discrepancy between Nautobot controllers allows authenticated low-privileged users to directly POST forged approval responses, bypass group and permission checks, and trigger the execution of privileged automated tasks.\n\n## Technical Details\n\n- **CWE ID**: CWE-285\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 6.4 (Medium)\n- **EPSS Score**: 0.00\n- **Exploit Status**: none\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Nautobot Network Automation Platform\n- **Nautobot**: >= 3.0.0, < 3.1.8 (Fixed in: `3.1.8`)\n\n## Mitigation\n\n- Upgrade Nautobot deployments to version 3.1.8 or higher.\n- Revoke the 'extras.add_approvalworkflowstageresponse' permission from non-administrative users.\n- Implement WAF/API Gateway rules to block modification methods targeting the response endpoints.\n\n**Remediation Steps:**\n1. Inspect current Nautobot deployment versions and schedule an upgrade to 3.1.8.\n2. Apply database queries to audit for incongruencies between the logged transaction user and the record's user attribute.\n3. Modify default Django user group permissions to restrict approval response addition capabilities.\n\n## References\n\n- [GHSA-q4c5-2j6f-r476 Security Advisory](https://github.com/nautobot/nautobot/security/advisories/GHSA-q4c5-2j6f-r476)\n- [Nautobot Fix Commit 8682707](https://github.com/nautobot/nautobot/commit/8682707d0391cbfd7694e3276127b78dc9cf29d8)\n- [Nautobot Release v3.1.8 Official Tag](https://github.com/nautobot/nautobot/releases/tag/v3.1.8)\n- [NVD - CVE-2026-83805](https://nvd.nist.gov/vuln/detail/CVE-2026-83805)\n- [CVE.org - CVE-2026-83805](https://www.cve.org/CVERecord?id=CVE-2026-83805)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-83805) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-23T12:31:40.727694Z"} https://vulnerability.circl.lu/sighting/03161634-cf34-472a-9957-b608f3f99718/export Wed, 23 Sep 2026 12:31:40 +0000