PatchSiren

Basekick-Labs CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Basekick-Labs CVE published 2026-11-04

CVE-2026-55098

CVE-2026-55098 debrief based on the supplied source corpus. The CVE record was published on 2026-11-04T17:02:37.000Z and has not been modified since then. This vulnerability allows any authenticated token to read or enumerate every other database's data within the deployment, defeating RBAC. The fix for CVE-2026-47735 is incomplete, allowing the bypass. The sandbox scope is the whole storage root, not the [truncated]