Is CVE-2026-111695 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-111695?

CVE-2026-111695 has a CVSS v3 severity of HIGH (7.1).

Back

CVE-2026-111695

Description

Shaiwz data-platform-open through commit efeacd3 contains an insecure direct object reference vulnerability that allows authenticated workspace members to access other workspaces' datasources by numeric id. Attackers can send foreign sequential ids to /datasource/detail, /listSchemaTable, /tableDetail, /update or /delete to obtain JDBC credentials, enumerate database schemas, and modify or delete datasources.