Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-16753

Quick assessment

Affected
Lowcoder Lowcoder
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 Lowcoder 2.4.10 及更早版本中，库查询执行接口存在授权逻辑缺陷。攻击者通过构造包含目标库查询标识符的请求，可让同一组织内的已认证管理员或开发者，执行属于其他组织的库查询，从而导致越权访问。

AI Predicted 6.5 Difficulty: Easy EPSS 0.16% · P5

Possible ATT&CK Techniques 1 AI

T1528 · Steal Application Access Token

Affected Version Matrix 1

VendorProduct Version RangeStatus
Lowcoder Lowcoder 2.1.0≤ 2.4.10 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-16753

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
CVE-2026-16753
Source: CVE Program / CVE List V5
Vulnerability Description
Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and including 2.4.10, allows an authenticated administrator or developer in one organization to execute a library query belonging to another organization via a crafted request containing the victim library-query identifier.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Lowcoder Lowcoder 2.1.0 ~ 2.4.10 -

II. Public POCs for CVE-2026-16753

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-16753

请登录查看更多情报信息。

Other References for CVE-2026-16753 (1)

V. Comments for CVE-2026-16753

No comments yet

Leave a comment