Is CVE-2026-82984 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-82984?

CVE-2026-82984 has a CVSS v3 severity of MEDIUM (4.3).

Back

CVE-2026-82984

Description

When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team ("You are not a member of ..."), but the resources API endpoint could still be called directly, allowing any authenticated non-member to enumerate the team's internal resources and their identifiers. This does not grant access to the contents of the discovered resources themselves, only their existence, names, and identifiers.