Is CVE-2026-111721 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-111721?

CVE-2026-111721 has a CVSS v3 severity of MEDIUM (5.4).

Back

CVE-2026-111721

Description

Open WES through 1.0.0 contains an authorization bypass vulnerability that allows authenticated users to modify other warehouses' stock records because GlobalGatewayFilter never enforces auth_warehouse scoping. Attackers holding the menu permission can enumerate sequential IDs on freezeContainerStock and unfreezeContainerStock endpoints to freeze or unfreeze container stock in other warehouses.