CVE-2026-46485— Dash: Users can write to config despire permissions (OIDC tested)
Quick assessment
Affected
lissy93 dashy
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
lissy93 dashy是lissy93个人开发者开源的一个可以部署在自己服务器上的个人导航/监控面板。 lissy93 dashy 4.0.8之前版本存在安全漏洞，该漏洞源于配置错误、权限许可和访问控制问题、授权问题和处理逻辑错误，使用OIDC的部署可能允许未经验证的用户或非管理员用户通过配置保存功能写入更改main config.yaml，导致未授权修改仪表盘配置和潜在服务中断。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-46485
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Dash: Users can write to config despire permissions (OIDC tested)
Source: CVE Program / CVE List V5
Vulnerability Description
Dashy is a self-hostable personal dashboard. Prior to 4.0.8, Dashy deployments using OIDC can allow unauthenticated users or non-admin authenticated users to write changes to the main config.yaml through the config-saving functionality despite configured permissions, allowing unauthorized modification of dashboard configuration and potential service disruption. This issue is fixed in version 4.0.8.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
系统设置或配置在外部可控制
Source: CVE Program / CVE List V5
Vulnerability Title
lissy93 dashy 配置错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
lissy93 dashy是lissy93个人开发者开源的一个可以部署在自己服务器上的个人导航/监控面板。 lissy93 dashy 4.0.8之前版本存在安全漏洞，该漏洞源于配置错误、权限许可和访问控制问题、授权问题和处理逻辑错误，使用OIDC的部署可能允许未经验证的用户或非管理员用户通过配置保存功能写入更改main config.yaml，导致未授权修改仪表盘配置和潜在服务中断。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-46485
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
Qwen3.6-35B-A3B
· 8922 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month
III. Intelligence Information for CVE-2026-46485
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-46485 (1)
Vendor Pages for CVE-2026-46485 (1)
-
🔗 Release Dashy v4.0.8 🚀 · lissy93/dashy · GitHub x_refsource_MISC
IV. Related Vulnerabilities
Same weakness: CWE-15
-
CVE-2026-16708
IBM Db2 Mirror for i is affected by multiple vulnerabilities -
CVE-2026-73661
FreePBX: Authenticated Framework AUTHTYPE Can Be Restored Fr -
CVE-2026-66065
Ouroboros: Untrusted project .env can still reach RCE via om -
CVE-2026-56567
HCL iControl is affected by multiple security vulnerabilitie -
CVE-2026-44768
Security misconfiguration in SAP CRM (WebClient UI)
V. Comments for CVE-2026-46485
No comments yet