CVE-2026-121734— ZaneOps 1.14.0 before 1.15.2 Cross-Workspace Information Disclosure via ReviewPreviewEnvDeployAPIView

Quick assessment

Affected

zane-ops zane-ops

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

ZaneOps 1.14.0 至 1.15.2（不含）版本存在一个授权绕过漏洞。该漏洞允许任何工作区管理员通过调用接口（未进行项目范围限制），读取其他工作区中待处理的预览环境。攻击者可以利用公开的分叉拉取请求（Pull Request）评论中提供的项目标识符（project slug）和环境名称，获取明文的环境变量以及预览环境的基本认证（basic-auth）凭据。

CVSS 6.5 · Medium Updated Nov 04, 2026

Possible ATT&CK Techniques 2 AI

T1003 · OS Credential Dumping T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

ZaneOps 1.14.0 before 1.15.2 Cross-Workspace Information Disclosure via ReviewPreviewEnvDeployAPIView

Source: CVE Program / CVE List V5

Vulnerability Description

ZaneOps 1.14.0 before 1.15.2 contains an authorization bypass vulnerability that allows any workspace administrator to read another workspace's pending preview environment by querying ReviewPreviewEnvDeployAPIView without project scoping. Attackers can use the project slug and environment name from public fork pull request comments to retrieve plaintext environment variables and preview basic-auth credentials.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

通过用户控制密钥绕过授权机制

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
zane-ops	zane-ops	1.14.0 ~ 1.15.2	-

II. Public POCs for CVE-2026-121734

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-121734

请登录查看更多情报信息。

Other References for CVE-2026-121734 (6)

https://github.com/zane-ops/zane-ops/blob/v1.15.1/backend/zane_api/views/environments.py#L246-L248 technical-description
https://github.com/zane-ops/zane-ops product
https://github.com/zane-ops/zane-ops/commit/0f3e30403a605dc155a664bc70722c74159a6494 patch
https://github.com/zane-ops/zane-ops/releases/tag/v1.15.2 release-notes
https://github.com/zane-ops/zane-ops/security/advisories/GHSA-r87v-8542-wx9q vendor-advisory
https://www.vulncheck.com/advisories/zaneops-1.14.0-before-1.15.2-cross-workspace-information-disclosure-via-reviewpreviewenvdeployapiview third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-121734

IV. Related Vulnerabilities

Same weakness: CWE-639