jitsucom CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

LOW jitsucom CVE published 2026-10-22

CVE-2026-115509

CVE-2026-115509 is a low-severity vulnerability in Jitsu Console before version 2.14.0-beta.41. An authenticated user can bypass cross-workspace authorization via the sources/state API, allowing them to read, overwrite, or delete stream cursors in another workspace, potentially causing data re-ingestion or skipped data. This vulnerability is caused by an incorrect authorization check in the sources/state. [truncated]