MEDIUM 6.5 NVD

CVE-2026-77169

A vulnerability in the team folders (formerly group folders) app when used in combination with the workspace app allowed API/REST-only delegated administrators

A vulnerability in the team folders (formerly group folders) app when used in combination with the workspace app allowed API/REST-only delegated administrators to bypass folder-level authorization controls. The workspace app enables organizations to delegate limited administrative privileges for team folder management via API/REST only, restricting access to folders for which the admin has advanced permissions.

References

https://hackerone.com/reports/3674940

Published: 2026-09-18 · Source: NVD · Feed updated: 2026-09-18

This medium severity vulnerability with a CVSS score of 6.5 was published on 2026-09-18 via NVD.

vulnfeed aggregates 13481 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.