CVE-2026-111721: Open WES through 1.0.0 Broken Access Control via GlobalGatewayFilter Warehouse Scoping
Open WES through 1.0.0 contains an authorization bypass vulnerability that allows authenticated users to modify other warehouses' stock records because GlobalGatewayFilter never enforces authwarehouse scoping. Attackers holding the menu permission can enumerate sequential IDs on freezeContainerStock and unfreezeContainerStock endpoints to freeze or unfreeze container stock in other warehouses.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated user who holds the relevant menu permission can exploit it. The attacker can target other warehouses by enumerating sequential IDs used by the freezeContainerStock and unfreezeContainerStock endpoints.
What access or interaction does exploitation require?
Exploitation is network-accessible and requires low privileges: the attacker must be authenticated and have the menu permission. No user interaction is required.
What is the impact on affected stock records?
An attacker can freeze or unfreeze container stock records belonging to other warehouses. The reported impact is integrity and availability loss; no confidentiality impact is indicated.
How can defenders determine whether they are affected?
Systems running Open WES through version 1.0.0 are affected according to the report. Review whether GlobalGatewayFilter enforces auth_warehouse scoping for requests to the stock freeze and unfreeze endpoints.