CVE-2026-7142

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-7142

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-7142.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-7142

Aliases

Published

2026-04-27T17:00:17Z

Modified

2026-08-12T03:51:15Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

Wooey API Endpoint scripts.py add_or_update_script improper authorization

Details

A vulnerability was determined in Wooey up to 0.13.2. The impacted element is the function add_or_update_script of the file wooey/api/scripts.py of the component API Endpoint. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 0.13.3rc1 and 0.14.0 is sufficient to resolve this issue. This patch is called f7846fc0c323da8325422cab32623491757f1b88. The affected component should be upgraded.

Database specific

{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-266",
        "CWE-285"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/7xxx/CVE-2026-7142.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "0.13.1"
                },
                {
                    "last_affected": "0.13.1"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/wooey/wooey

Affected ranges

Type

GIT

Repo

https://github.com/wooey/wooey

Events

Introduced

24184567c94f9c58d16f83506b0609257053dfe7

Fixed

f7846fc0c323da8325422cab32623491757f1b88

Fixed

7f86c1e0c42639e780b1b50c5e74d8697b0b89fc

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "0.13.0"
        },
        {
            "last_affected": "0.13.0"
        },
        {
            "introduced": "0.13.2"
        },
        {
            "last_affected": "0.13.2"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

0.*

0.13.0

0.13.2

v0.*

v0.13.0

v0.13.2

v0.13.2rc1

v0.13.2rc2

v0.13.2rc3

v0.13.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-7142.json"