CVE-2026-111695: Shaiwz data-platform-open through commit efeacd3 IDOR in Datasource API
Shaiwz data-platform-open through commit efeacd3 contains an insecure direct object reference vulnerability that allows authenticated workspace members to access other workspaces' datasources by numeric id. Attackers can send foreign sequential ids to /datasource/detail, /listSchemaTable, /tableDetail, /update or /delete to obtain JDBC credentials, enumerate database schemas, and modify or delete datasources.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must be an authenticated member of any workspace. No additional privileges or user interaction are required.
What data and actions are exposed?
By supplying datasource IDs from other workspaces, an attacker can retrieve JDBC credentials, enumerate database schemas and tables, and modify or delete foreign-workspace datasource records.
Which API operations should be reviewed for cross-workspace access?
Review requests to /datasource/detail, /listSchemaTable, /tableDetail, /update, and /delete. These endpoints accept numeric datasource IDs that can be changed to sequential IDs belonging to other workspaces.
How can an organization determine whether it is affected?
The affected code is described as data-platform-open through commit efeacd3. Test with an authenticated workspace-member account by requesting a datasource ID known to belong to a different workspace and verify whether the operation is permitted.