Taubyte CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Taubyte CVE published 2026-08-11

CVE-2026-69119

CVE-2026-69119 is a missing authorization vulnerability in Taubyte Tau v1.1.10's services/auth HTTP service. An authenticated user can read or delete another tenant's project using arbitrary project IDs in GET and DELETE /projects/{id} requests. The GitHubTokenHTTPAuth middleware fails to verify ownership or access rights, allowing attackers with valid GitHub tokens to perform cross-tenant project takeover.