CVE-2026-15541

Summary

A flaw has been found in will-moss Isaiah up to 1.36.9. The impacted element is the function Server.Handle of the file app/server/server/server.go of the component Master Websocket Handler. Executing a manipulation of the argument Agent can lead to missing authorization. It is possible to launch the attack remotely. The pull request to fix this issue awaits acceptance.

Affected Software

Weaknesses

• CWE-862: Missing Authorization
• CWE-863: Incorrect Authorization

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

References

• https://vuldb.com/vuln/377891
• https://vuldb.com/vuln/377891/cti
• https://vuldb.com/cve/CVE-2026-15541
• https://vuldb.com/submit/855074
• https://github.com/will-moss/isaiah/issues/34
• https://github.com/will-moss/isaiah/pull/35
• https://github.com/will-moss/isaiah/

• ←Previous
• Next→