Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2026-115334

Lotus through 0.10.2 Authorization Bypass via switch_organization Endpoint

Lotus through 0.10.2 contains an authorization bypass vulnerability in ChangeUserOrganizationView.post that allows authenticated users to join any organization by supplying its UUID. Self-registered attackers who know another organization's UUID can send a POST request to /app/switch_organization/ to access that tenant's data and billing configuration.

CVSS 4.0 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Uselotus
Products
Lotus
CVE-2026-115330

Lotus through 0.10.2 SQL Injection via Custom SQL Billable Metrics

Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to execute arbitrary SQL by appending stacked statements to custom metric queries. Attackers can submit semicolon-separated SQL through POST /app/metrics/, bypassing first-statement-only validation, to read or modify data across all tenants.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Uselotus
Products
Lotus
CVE-2026-115332

Lotus through 0.10.2 SQL Injection via Subscription Filter Keys

Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL by registering crafted subscription_filter_keys that bypass keyword-only validation. Attackers can create subscriptions using the malicious key, which is rendered as an unquoted group-by identifier, to inject SQL into usage aggregation queries against the shared multi-tenant database.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Uselotus
Products
Lotus
CVE-2026-115331

Lotus through 0.10.2 SQL Injection via Metric Property Names and Filters

Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL by supplying crafted billable metric property_name or categorical filter values. Attackers can embed SQL in values rendered unescaped into Jinja-generated counter, gauge and rate metric queries to access the database shared by all tenants.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Uselotus
Products
Lotus
CVE-2026-115333

Lotus through 0.10.2 Improper Authentication via Event Ingestion API Key Prefix

Lotus through 0.10.2 contains an improper authentication vulnerability in the Go event ingestion middleware that validates API keys by prefix only, without checking the secret against the stored hashed_key. Attackers who know or obtain an API key prefix can submit usage events to POST /api/track/ as that organization, altering its metered usage and billing.

CVSS 4.0 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Uselotus
Products
Lotus
CVE-2026-115329

Lotus through 0.10.2 Cross-Organization IDOR via SubscriptionViewSet

Lotus through 0.10.2 contains an insecure direct object reference vulnerability in SubscriptionViewSet.get_object() that uses an unscoped queryset without organization filtering or permission checks. Authenticated users or API keys from any organization can supply another organization's subscription_id to read, cancel, update, switch plans, or modify addons, altering another tenant's billing.

CVSS 4.0 · 6 Medium EPSS < 1% KEV · Not listed
Vendors
Uselotus
Products
Lotus