Openremote
Monthly
Cross-realm information disclosure in OpenRemote's Notification REST API exposes all tenants' notification history - including full message bodies - to any authenticated tenant administrator on the platform. Any user holding read:admin credentials in one realm can issue a single zero-parameter GET request to retrieve sensitive notification data belonging to every other realm. No public exploit has been identified at time of analysis, but the attack is trivially simple and requires no technical sophistication beyond valid tenant admin credentials.
Cross-realm authorization bypass in OpenRemote allows any authenticated realm administrator to permanently delete notifications belonging to other tenants, including the master realm. Any account holding the write:admin role in a single realm can issue DELETE requests targeting notification resource identifiers owned by foreign realms, because the deletion endpoint performs no cross-realm ownership check. No public exploit has been identified at time of analysis and this CVE is not in the CISA KEV catalog, but the low attack complexity and straightforward HTTP-based attack surface make this a realistic insider threat in multi-tenant deployments.
Unauthorized modification of push notification tokens in OpenRemote before 1.26.2 allows unauthenticated attackers to redirect or block push notifications to legitimate consoles. By supplying a known console asset identifier, an attacker can bypass authentication on the registration API to overwrite notification tokens and metadata, disrupting notification delivery. The issue is tracked as CVE-2026-66013; no public exploit is confirmed at time of analysis.
SQL injection in OpenRemote's datapoint crosstab export endpoint (all versions before 1.26.0) lets an authenticated user with asset creation or rename permissions exfiltrate database contents by embedding SQL into an asset display name that is concatenated into a raw PostgreSQL crosstab query. Injected SELECT results are streamed back inside the ZIP/CSV export response, giving a practical read primitive against any table the manager's database role can reach - including other tenants' data in multi-tenant deployments. Publicly available exploit code exists (VulnCheck/GHSA proof of concept); no active exploitation has been reported.
Cross-tenant alarm destruction in OpenRemote Manager before 1.24.2 lets any authenticated user in one realm permanently delete alarms belonging to other tenants by submitting arbitrary alarm IDs to the bulk removeAlarms() endpoint. The flaw is reported by VulnCheck with a CVSS 4.0 score of 8.6 and a proof-of-concept exists per the SSVC assessment, but there is no public exploit identified at time of analysis and the issue is not listed in CISA KEV. Because alarm IDs are sequential auto-increment values, enumeration and mass deletion of safety-critical and security alerts across tenants is trivial.
Cross-tenant insecure direct object reference in OpenRemote versions up to and including 1.26.2 allows an authenticated attacker to bypass realm access controls in the AlarmResourceImpl.setAssetLinks endpoint, disclosing victim tenant asset names and persisting unauthorized cross-realm alarm-asset links. The flaw stems from a structurally incomplete authorization check that validates only the first realm returned by non-deterministic HashSet iteration rather than all realms submitted in the request, making the attack probabilistically repeatable until successful. No public exploit has been identified at time of analysis; the issue was fixed in version 1.27.0 per the vendor security advisory.
Cross-tenant information disclosure in OpenRemote versions before 1.26.2 allows any authenticated user holding the read:rules role to retrieve operational syslog events from arbitrary tenants by querying the GET /api/{realm}/syslog/event endpoint. The SyslogResource REST endpoint fails to scope log retrieval to the caller's own realm, exposing asset IDs, agent connection details, rule names, and protocol errors belonging to other organizations in the same multi-tenant deployment. No public exploit code or active exploitation has been identified at time of analysis; the vendor has addressed the issue in version 1.26.2.
An issue was discovered in OpenRemote through 1.0.4 allows attackers to execute arbitrary code via a crafted Groovy rule. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Cross-realm information disclosure in OpenRemote's Notification REST API exposes all tenants' notification history - including full message bodies - to any authenticated tenant administrator on the platform. Any user holding read:admin credentials in one realm can issue a single zero-parameter GET request to retrieve sensitive notification data belonging to every other realm. No public exploit has been identified at time of analysis, but the attack is trivially simple and requires no technical sophistication beyond valid tenant admin credentials.
Cross-realm authorization bypass in OpenRemote allows any authenticated realm administrator to permanently delete notifications belonging to other tenants, including the master realm. Any account holding the write:admin role in a single realm can issue DELETE requests targeting notification resource identifiers owned by foreign realms, because the deletion endpoint performs no cross-realm ownership check. No public exploit has been identified at time of analysis and this CVE is not in the CISA KEV catalog, but the low attack complexity and straightforward HTTP-based attack surface make this a realistic insider threat in multi-tenant deployments.
Unauthorized modification of push notification tokens in OpenRemote before 1.26.2 allows unauthenticated attackers to redirect or block push notifications to legitimate consoles. By supplying a known console asset identifier, an attacker can bypass authentication on the registration API to overwrite notification tokens and metadata, disrupting notification delivery. The issue is tracked as CVE-2026-66013; no public exploit is confirmed at time of analysis.
SQL injection in OpenRemote's datapoint crosstab export endpoint (all versions before 1.26.0) lets an authenticated user with asset creation or rename permissions exfiltrate database contents by embedding SQL into an asset display name that is concatenated into a raw PostgreSQL crosstab query. Injected SELECT results are streamed back inside the ZIP/CSV export response, giving a practical read primitive against any table the manager's database role can reach - including other tenants' data in multi-tenant deployments. Publicly available exploit code exists (VulnCheck/GHSA proof of concept); no active exploitation has been reported.
Cross-tenant alarm destruction in OpenRemote Manager before 1.24.2 lets any authenticated user in one realm permanently delete alarms belonging to other tenants by submitting arbitrary alarm IDs to the bulk removeAlarms() endpoint. The flaw is reported by VulnCheck with a CVSS 4.0 score of 8.6 and a proof-of-concept exists per the SSVC assessment, but there is no public exploit identified at time of analysis and the issue is not listed in CISA KEV. Because alarm IDs are sequential auto-increment values, enumeration and mass deletion of safety-critical and security alerts across tenants is trivial.
Cross-tenant insecure direct object reference in OpenRemote versions up to and including 1.26.2 allows an authenticated attacker to bypass realm access controls in the AlarmResourceImpl.setAssetLinks endpoint, disclosing victim tenant asset names and persisting unauthorized cross-realm alarm-asset links. The flaw stems from a structurally incomplete authorization check that validates only the first realm returned by non-deterministic HashSet iteration rather than all realms submitted in the request, making the attack probabilistically repeatable until successful. No public exploit has been identified at time of analysis; the issue was fixed in version 1.27.0 per the vendor security advisory.
Cross-tenant information disclosure in OpenRemote versions before 1.26.2 allows any authenticated user holding the read:rules role to retrieve operational syslog events from arbitrary tenants by querying the GET /api/{realm}/syslog/event endpoint. The SyslogResource REST endpoint fails to scope log retrieval to the caller's own realm, exposing asset IDs, agent connection details, rule names, and protocol errors belonging to other organizations in the same multi-tenant deployment. No public exploit code or active exploitation has been identified at time of analysis; the vendor has addressed the issue in version 1.26.2.
An issue was discovered in OpenRemote through 1.0.4 allows attackers to execute arbitrary code via a crafted Groovy rule. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.