VDB
CVE-2026-16753
CVE-2026-16753
PUBLISHED
Reported by certcc · Published October 13, 2026
Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and including 2.4.10, allows an authenticated administrator or developer in one organization to execute a library query belonging to another organization via a crafted request containing the victim library-query identifier.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Lowcoder | Lowcoder | 2.1.0 |
| Lowcoder | Lowcoder | 2.1.0 |
Timeline
- Oct 13, 2026 CVE Published
- Oct 14, 2026 EPSS Score
- Oct 14, 2026 Coalition ESS Score
- Oct 14, 2026 Security Advisory
- Oct 16, 2026 CVE Updated