Guns 8.3.5 User Info Disclosure CVE-2026-92600

Vulnerability Key Information Summary Vulnerability Overview Title: Information Disclosure Vulnerability in Guns 8.3.5 and Earlier (Missing Authorization Check) CVE: CVE-2026-92600 CWE: CWE-862 Missing Authorization CVSS Score: 7.1 (HIGH) CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/SC:N/SI:N/SA:N Date: 9/18/2026 Affected Versions: Guns ≤ 8.3.5 Description: In Guns 8.3.5, the and endpoints in lack the configuration. This causes the permission interceptor to skip RBAC validation for authenticated users. As a result, an attacker can use any valid login token to access sensitive user information (account name, real name, email, phone number, last login IP, role assignments, etc.). References: - GitHub Issue #118 - https://github.com/tylergum/Guns - https://github.com/tylergum/Guns/blob/2a129477339b35d5c06197099ecaa77d7f22b20e8a1a/cr/main/java/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns/cn/tylergum/guns

Goal Reached Thanks to every supporter — we hit 100%!

Guns 8.3.5 User Info Disclosure CVE-2026-92600

More from this source