CVE-2026-119599: AxonHub through 1.0.0-beta11 Privilege Escalation via Service Account API Key Scopes

Published Oct 30, 2026

Updated

AxonHub through 1.0.0-beta11 contains a privilege escalation vulnerability that allows project users to assign system-level scopes by creating serviceaccount API keys with unvalidated scopes. Attackers holding writeapikeys can mint keys with readchannels and query /admin/graphql to read every channel's configuration, including base URLs and model lists.

Event History

Oct 30, 2026

CVE Published

via MITRE·01:18 PM

Data Sourced

via MITRE·01:18 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue, and what access do they need?

A project user who has the write_api_keys permission can exploit it. No user interaction or separate administrative access is required.

What data can be exposed through exploitation?

An attacker can create a service-account API key with the read_channels scope and query /admin/graphql. This can expose configuration for every channel, including base URLs and model lists.

Are deployments affected by default?

The available information does not state whether write_api_keys is granted by default. Exposure depends on whether a project user has that permission and can create service-account API keys.

What versions are known to be affected?

AxonHub through version 1.0.0-beta11 is affected. The provided information does not identify a fixed version.

CVE-2026-119599: AxonHub through 1.0.0-beta11 Privilege Escalation via Service Account API Key Scopes

Event History

Frequently Asked Questions

Who can exploit this issue, and what access do they need?

What data can be exposed through exploitation?

Are deployments affected by default?

What versions are known to be affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue, and what access do they need?

What data can be exposed through exploitation?

Are deployments affected by default?

What versions are known to be affected?