Is CVE-2026-77169 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-77169?

CVE-2026-77169 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-77169

Description

A vulnerability in the team folders (formerly group folders) app when used in combination with the workspace app allowed API/REST-only delegated administrators to bypass folder-level authorization controls. The workspace app enables organizations to delegate limited administrative privileges for team folder management via API/REST only, restricting access to folders for which the admin has advanced permissions.