CVE-2026-40866

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-40866

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-40866.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-40866

Aliases

GHSA-q2qh-v828-r4p7

Published

2026-04-21T18:15:30.126Z

Modified

2026-07-15T01:48:52.160115736Z

Severity

8.6 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

Horilla: Unauthorized Document Overwrite via File Upload Endpoint

Details

Horilla is a free and open source Human Resource Management System (HRMS). In 1.5.0, an insecure direct object reference in the employee document upload endpoint allows any authenticated user to overwrite or replace or corrupt another employee’s document by changing the document ID in the upload request. This enables unauthorized modification of HR records.

Database specific

{
    "cwe_ids": [
        "CWE-284",
        "CWE-639"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40866.json",
    "cna_assigner": "GitHub_M"
}

References

Affected packages

Git / github.com/horilla/horilla-hr

Affected ranges

Type

GIT

Repo

https://github.com/horilla/horilla-hr

Events

Introduced

61bd5173220d19925ad8220db9152a75c881ea73

Last affected

61bd5173220d19925ad8220db9152a75c881ea73

Database specific

{
    "extracted_events": [
        {
            "introduced": "1.5.0"
        },
        {
            "last_affected": "1.5.0"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

1.*

1.5.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-40866.json"