CVE-2026-83805
2 advisories.
PyPI/nautobot CVE-2026-83805: medium 6.4, EPSS 0.22%
Nautobot: Authorization bypass in approval workflow REST API allows self-approval and unauthorized activation of scheduled jobs
Action: Upgrade nautobot to 3.1.8 or later.
pip install nautobot==3.1.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.1.8 | - |
Fixed versions
| 3.1.8 |
Sources
- osv: GHSA-q4c5-2j6f-r476
- https://github.com/nautobot/nautobot/security/advisories/GHSA-q4c5-2j6f-r476
- https://github.com/nautobot/nautobot/commit/8682707d0391cbfd7694e3276127b78dc9cf29d8
- https://github.com/nautobot/nautobot
- https://github.com/nautobot/nautobot/releases/tag/v3.1.8
CVE-2026-83805 · published · modified · JSON
PyPI/nautobot CVE-2026-83805: medium 6.4, EPSS 0.22%
Nautobot: Authorization bypass in approval workflow REST API allows self-approval and unauthorized activation of scheduled jobs
Action: Upgrade nautobot to 3.1.8 or later.
pip install nautobot==3.1.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.1.8 | - |
Fixed versions
| 3.1.8 |
Sources
- osv: PYSEC-2026-4111
- https://github.com/nautobot/nautobot/security/advisories/GHSA-q4c5-2j6f-r476
- https://github.com/nautobot/nautobot/commit/8682707d0391cbfd7694e3276127b78dc9cf29d8
- https://github.com/nautobot/nautobot
- https://github.com/nautobot/nautobot/releases/tag/v3.1.8
- https://pypi.org/project/nautobot
- https://github.com/advisories/GHSA-q4c5-2j6f-r476
- https://nvd.nist.gov/vuln/detail/CVE-2026-83805
CVE-2026-83805 · published · modified · JSON