CVE-2026-82594

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-82594

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82594.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-82594

Published

2026-08-30T23:30:10.148Z

Modified

2026-09-02T03:31:01.348971335Z

Severity

1.3 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

LogNet grpc-spring-boot-starter Annotation Processing improper authorization

Details

A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the component Annotation Processing. Such manipulation leads to improper authorization. The attack may be performed from remote. A high complexity level is associated with this attack. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Database specific

{
    "cwe_ids": [
        "CWE-266",
        "CWE-285"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82594.json",
    "cna_assigner": "VulDB"
}

References

Affected packages

Git / github.com/lognet/grpc-spring-boot-starter

Affected ranges

Type

GIT

Repo

https://github.com/lognet/grpc-spring-boot-starter

Events

Introduced

fdcb2e214eb774bd66ad1eb35f8b3de40acacb63

Last affected

c9e3a22d799aa1920270550a1dd7ea6bb38fdb54

Database specific

Show details

{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "5.0"
        },
        {
            "last_affected": "5.0"
        },
        {
            "introduced": "5.1"
        },
        {
            "last_affected": "5.1"
        },
        {
            "introduced": "5.2.0"
        },
        {
            "last_affected": "5.2.0"
        }
    ]
}

Affected versions

5.*

5.0

5.1

5.2.0

v.*

v.5.0.0

v.5.1.0

v.5.1.1

v.5.1.2

v.5.1.3

v.5.1.4

v.5.1.5

v.5.2.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82594.json"