CVE-2026-54641
1 advisory.
Maven/io.openremote:openremote-manager CVE-2026-54641: high 7.7
OpenRemote has Cross-Realm User Information Disclosure in UserResourceImpl
Action: Upgrade io.openremote:openremote-manager to 1.24.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.24.2 | - |
Fixed versions
| 1.24.2 |
Sources
- osv: GHSA-xqr9-4wvv-gvch
- https://github.com/openremote/core/security/advisories/GHSA-xqr9-4wvv-gvch
- https://github.com/openremote/openremote/commit/de89b8d3af272d717bf297934c2cbc97243f08b7
- https://github.com/openremote/core
- https://github.com/openremote/core/releases/tag/1.24.2
CVE-2026-54641 · published · modified · JSON