CVE-2026-125373: IETF Datatracker before 12.83.0 Cross-NomCom Authorization Bypass via Nomcom Views
IETF Datatracker before 12.83.0 contains an authorization bypass vulnerability that allows NomCom role holders to access other committees' records by supplying sequential primary keys. Attackers can abuse viewfeedbacknominee, viewfeedbacktopic, viewfeedbackunrelated and editnominee to view confidential nominee identities, reclassify feedback, and change nominee email addresses.
Affected Software
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The attacker must hold a NomCom role. Exploitation involves supplying sequential primary keys to access records belonging to other committees.
What information and records could be affected?
An attacker may view confidential nominee identities, reclassify feedback, and change nominee email addresses. The affected functionality includes the feedback nominee, feedback topic, unrelated feedback, and nominee editing views.
Which deployments should be prioritized for remediation?
IETF Datatracker deployments running versions before 12.83.0 should be prioritized, particularly where NomCom role holders can access NomCom views and confidential committee records are present.