CVE-2026-76237: stigmem before 0.9.0a12 Cross-Tenant BOLA via quarantine
stigmem-node before 0.9.0a12 contains a broken object level authorization (cross-tenant BOLA) vulnerability in the quarantine review endpoints. On multi-tenant deployments running the opt-in stigmem-plugin-multi-tenant, the list/count queries and getquarantinedfact in routes/quarantine.py lacked a tenantid predicate and the garden lookup was not tenant-scoped, allowing a tenant administrator with only a plain tenant write capability to list, read, and admit or reject quarantined facts belonging to other tenants via the /v1/quarantine endpoints. Default single-tenant deployments are not affected.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed?
Only multi-tenant deployments that have enabled the opt-in stigmem-plugin-multi-tenant are affected. Default single-tenant deployments are not affected.
What level of access does an attacker need?
An attacker needs to be a tenant administrator with a plain tenant write capability. They can use the /v1/quarantine endpoints to access quarantined facts from other tenants.
What could an unauthorized tenant administrator do?
They can list and read quarantined facts belonging to other tenants, and can admit or reject those facts. The affected operations include quarantine list and count queries and retrieval of quarantined facts.
How can I determine whether my deployment is affected?
Check whether the deployment runs stigmem-node before 0.9.0a12 and has the stigmem-plugin-multi-tenant enabled. If both conditions apply, review access to the /v1/quarantine endpoints and treat cross-tenant quarantine data and decisions as potentially exposed.